PHP - CVE CyberSecurity Database News (Page 3)

Nov 12, 2025 PHP

CVE-2025-64500 - Path Traversal Bypass in Symfony’s HttpFoundation Component

A new critical security vulnerability, CVE-2025-64500, has been uncovered in the popular PHP framework, Symfony. More specifically, it affects Symfony’s HttpFoundation component—

Nov 6, 2025 WordPress PHP

CVE-2025-22288 - How Path Traversal Vulnerability in WPMU DEV Smush Plugin Can Expose Your WordPress

Security researchers found a critical weakness in millions of WordPress websites using the popular Smush Image Compression and Optimization plugin, published by WPMU DEV. This

Nov 5, 2025 API SQL PHP

CVE-2025-64459 - Critical SQL Injection Vulnerability in Django QuerySet Methods – How Attackers Could Exploit Your App

--- Django is one of the world's most popular web frameworks for Python, trusted by countless websites for its emphasis on security and simplicity.

Sep 19, 2025 RCE Exploit PHP

CVE-2025-48703 - Unauthenticated Remote Code Execution in CWP (Control Web Panel) File Manager – Full Exploit Guide

--- Published: June 2024 Vulnerable Software: CWP (Control Web Panel, formerly CentOS Web Panel) < .9.8.1205 Vulnerability Type: Remote Code Execution (RCE) Attack Complexity:

Sep 9, 2025 WordPress API Exploit PHP

CVE-2025-47437 - Server-Side Request Forgery (SSRF) Vulnerability in LiteSpeed Cache (<=7..1)

*Published: June 2024 - By [YourName]* LiteSpeed Cache is a popular WordPress caching plugin by LiteSpeed Technologies, helping millions speed up their sites. But, recently, a