Phpgurukul News Portal Project vulnerabilities

11 CVEs affecting Phpgurukul News Portal Project, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5840, published 2026-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-3768, published 2024-04-15. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the file search.php. The manipulation of…
CVE-2024-3767, published 2024-04-15. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code of the file /admin/edit-post.php. The manipulation of the argument…
CVE-2025-5252, published 2025-05-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of…
CVE-2025-5251, published 2025-05-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the…
CVE-2025-5250, published 2025-05-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation…
CVE-2025-5249, published 2025-05-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-category.php. The…
CVE-2025-5370, published 2025-05-31. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of…
CVE-2026-5837, published 2026-04-09. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in PHPGurukul News Portal Project 4.1. This affects an unknown part of the file /news-details.php. The manipulation of the argument Comment results in sql injection. The…
CVE-2026-5840, published 2026-04-09. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown function of the file /admin/check_availability.php. Performing a manipulation of the argument…
CVE-2026-5839, published 2026-04-09. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknown processing of the file /admin/add-subcategory.php. Such manipulation of the argument…

Latest

CVE-2026-5838, published 2026-04-09. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability affects unknown code of the file /admin/add-subadmins.php. This manipulation of the argument sadminusername…