Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,018

All time

Critical · Active

10,651

CVSS ≥ 9.0

New · 14 days

1,622

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2671–2700 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58643	high	7.2/10	WordPress LTL Freight Quotes – Daylight Edition Plugin <= 2.2.7 - PHP Object Injection Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58642	high	7.2/10	WordPress LTL Freight Quotes – Day & Ross Edition Plugin <= 2.1.11 - PHP Object Injection Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-9848	medium	6.9/10	ScriptAndTools Real Estate Management System userlist.php redirect	Sep 3, 2025 10mo ago
CVE-2025-9847	medium	5.3/10	ScriptAndTools Real Estate Management System register.php unrestricted upload	Sep 3, 2025 10mo ago
CVE-2025-9845	medium	5.1/10	code-projects Fruit Shop Management System products.php cross site scripting	Sep 3, 2025 10mo ago
CVE-2025-9841	medium	5.3/10	code-projects Mobile Shop Management System AddNewProduct.php unrestricted upload	Sep 2, 2025 10mo ago
CVE-2025-9260	medium	6.5/10	Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read	Sep 2, 2025 10mo ago
CVE-2025-9840	medium	5.3/10	itsourcecode Sports Management System gametype.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9839	medium	6.9/10	itsourcecode Student Information Management System index.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9838	medium	6.9/10	itsourcecode Student Information Management System index.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9837	medium	6.9/10	itsourcecode Student Information Management System index.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9834	medium	5.1/10	PHPGurukul Small CRM registration.php cross site scripting	Sep 2, 2025 10mo ago
CVE-2025-9833	medium	6.9/10	SourceCodester Online Farm Management System login.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9832	medium	6.9/10	SourceCodester Food Ordering Management System register-router.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9831	medium	6.9/10	PHPGurukul Beauty Parlour Management System edit-services.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9830	medium	6.9/10	PHPGurukul Beauty Parlour Management System add-customer-services.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9829	medium	6.9/10	PHPGurukul Beauty Parlour Management System signup.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9814	medium	6.9/10	PHPGurukul Beauty Parlour Management System contact-us.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9811	medium	6.9/10	Campcodes Farm Management System reviewInput.php sql injection	Sep 2, 2025 10mo ago
CVE-2025-9802	medium	5.1/10	RemoteClinic profile.php sql injection	Sep 1, 2025 10mo ago
CVE-2025-9794	medium	6.9/10	Campcodes Computer Sales and Inventory System pos_transac.php sql injection	Sep 1, 2025 10mo ago
CVE-2025-9793	medium	6.9/10	itsourcecode Apartment Management System Setting admin.php sql injection	Sep 1, 2025 10mo ago
CVE-2025-9792	medium	6.9/10	itsourcecode Apartment Management System e_all_info.php sql injection	Sep 1, 2025 10mo ago
CVE-2025-9790	medium	6.9/10	SourceCodester Hotel Reservation System updateabout.php sql injection	Sep 1, 2025 10mo ago
CVE-2025-9789	medium	6.9/10	SourceCodester Online Hotel Reservation System edituser.php sql injection	Sep 1, 2025 10mo ago
CVE-2025-9788	medium	6.9/10	SourceCodester/Campcodes School Log Management System admin_class.php sql injection	Sep 1, 2025 10mo ago
CVE-2025-9786	medium	6.9/10	Campcodes Online Learning Management System teacher_signup.php sql injection	Sep 1, 2025 10mo ago
CVE-2025-9775	medium	6.9/10	RemoteClinic edit-my-profile.php unrestricted upload	Sep 1, 2025 10mo ago
CVE-2025-9774	medium	5.3/10	RemoteClinic edit-patient.php information disclosure	Sep 1, 2025 10mo ago
CVE-2025-9773	medium	5.3/10	RemoteClinic edit.php cross site scripting	Sep 1, 2025 10mo ago