PHP: exploited vulnerabilities
- 3exploited vulnerabilities
- 1used by ransomware
- Jul 7, 2025latest one added
- PHPMailer 1
- FastCGI Process Manager (FPM) 1
- PHP 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jul 7, 2025 | Command Injection | PHPMailer | Critical 9.8 | 99.7% |
| Mar 25, 2022 | Buffer Overflow | FastCGI Process Manager (FPM) | High 8.7 | 99.7% |
| Mar 25, 2022 | PHP-CGI Query String Parameter | PHP | Critical 9.8 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.