netVigilance Vulnerability intelligence since 2004

PHP

3 PHP vulnerabilities with confirmed exploitation in the wild, as published by CISA; 3 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for PHP
Vulnerability Status
overdue 409d2025-07-28 CVE-2016-10033 PHP / PHPMailer PHPMailer Command Injection Vulnerability 2025-07-07 9.8 past due
overdue 1609d2022-04-15 CVE-2019-11043 PHP / FastCGI Process Manager (FPM) PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability 2022-03-25 9.8 past dueransomware
overdue 1609d2022-04-15 CVE-2012-1823 PHP / PHP PHP-CGI Query String Parameter Vulnerability 2022-03-25 9.8 past due
3 records Open in catalog with filters →