Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

337,073

All time

Critical · Active

10,654

CVSS ≥ 9.0

New · 14 days

1,674

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 2851–2880 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-9237	medium	5.1/10	CodeAstro Ecommerce Website Edit Your Account my_account.php cross site scripting	Aug 20, 2025 10mo ago
CVE-2025-9236	medium	5.3/10	Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection	Aug 20, 2025 10mo ago
CVE-2010-20059	critical	9.3/10	FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution	Aug 20, 2025 10mo ago
CVE-2025-49434	critical	9.8/10	WordPress Cars4Rent Theme <= 1.4.2 - PHP Object Injection Vulnerability	Aug 20, 2025 10mo ago
CVE-2025-49438	high	8.1/10	WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability	Aug 20, 2025 10mo ago
CVE-2025-49890	critical	9.8/10	WordPress Organic Beauty Theme <= 1.4.6 - PHP Object Injection Vulnerability	Aug 20, 2025 10mo ago
CVE-2025-53299	critical	9.8/10	WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability	Aug 20, 2025 10mo ago
CVE-2025-53560	high	8.8/10	WordPress Noisa theme <= 2.6.0 - PHP Object Injection Vulnerability	Aug 20, 2025 10mo ago
CVE-2025-54007	high	8.8/10	WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability	Aug 20, 2025 10mo ago
CVE-2025-54012	high	7.2/10	WordPress Welcart e-Commerce Plugin <= 2.11.16 - PHP Object Injection Vulnerability	Aug 20, 2025 10mo ago
CVE-2025-54014	critical	9.8/10	WordPress MediCenter - Health Medical Clinic <= 15.1 - PHP Object Injection Vulnerability	Aug 20, 2025 10mo ago
CVE-2025-54053	medium	6.6/10	WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability	Aug 20, 2025 10mo ago
CVE-2025-8289	high	7.5/10	Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization	Aug 20, 2025 10mo ago
CVE-2025-8145	high	8.8/10	Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection	Aug 20, 2025 10mo ago
CVE-2025-9156	medium	6.9/10	itsourcecode Sports Management System sports.php sql injection	Aug 19, 2025 10mo ago
CVE-2025-9155	medium	6.9/10	itsourcecode Online Tour and Travel Management System forget_password.php sql injection	Aug 19, 2025 10mo ago
CVE-2025-9154	medium	6.9/10	itsourcecode Online Tour and Travel Management System page-login.php sql injection	Aug 19, 2025 10mo ago
CVE-2025-9153	medium	5.3/10	itsourcecode Online Tour and Travel Management System travellers.php unrestricted upload	Aug 19, 2025 10mo ago
CVE-2025-9150	medium	6.9/10	Surbowl dormitory-management-php violation_add.php sql injection	Aug 19, 2025 10mo ago
CVE-2025-9147	medium	5.1/10	jasonclark getsemantic index.php cross site scripting	Aug 19, 2025 10mo ago
CVE-2025-9140	medium	5.3/10	Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection	Aug 19, 2025 10mo ago
CVE-2025-49895	medium	6.5/10	WordPress ServerBuddy by PluginBuddy.com plugin <= 1.0.5 - CSRF to PHP Object Injection vulnerability	Aug 16, 2025 10mo ago
CVE-2025-9053	medium	6.9/10	projectworlds Travel Management System updatesubcategory.php sql injection	Aug 15, 2025 10mo ago
CVE-2025-9052	medium	6.9/10	projectworlds Travel Management System updatepackage.php sql injection	Aug 15, 2025 10mo ago
CVE-2025-9051	medium	6.9/10	projectworlds Travel Management System updatecategory.php sql injection	Aug 15, 2025 10mo ago
CVE-2025-9050	medium	6.9/10	projectworlds Travel Management System addcategory.php sql injection	Aug 15, 2025 10mo ago
CVE-2025-9047	medium	6.9/10	projectworlds Visitor Management System visitor_out.php sql injection	Aug 15, 2025 10mo ago
CVE-2025-9028	medium	6.9/10	code-projects Online Medicine Guide adphar.php sql injection	Aug 15, 2025 10mo ago
CVE-2025-9027	medium	6.9/10	code-projects Online Medicine Guide addelivery.php sql injection	Aug 15, 2025 10mo ago
CVE-2025-9025	medium	5.3/10	code-projects Simple Cafe Ordering System portal.php sql injection	Aug 15, 2025 10mo ago