Skip to content

Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

PHP: actively exploited vulnerabilities

3 vulnerabilities in PHP products (PHP) are in CISA’s catalog of exploited vulnerabilities. Last added: June 12, 2024.

0 vulnerabilities added in the last 12 months
3 exploited vulnerabilities in the catalog, in total
0 added in the last 30 days

By category

Add just one PHP category to your radar, or open its page.

Frameworks and libraries 3 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

PHP 3 vulnerabilities · Frameworks

Names used by CISA: PHP, PHP Group. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this PHP list.

Rank 1PHP
CVE-2024-4577
Ransomware
PHP-CGI OS Command Injection Vulnerability
Added more than a year ago: ranked by severity.
Added
Jun 12, 2024
CISA deadline
21 days
CVSS severity
9.8 (critical)
Rank 2PHP
CVE-2012-1823
CVE from 2012, added in 2022
PHP-CGI Query String Parameter Vulnerability
Added more than a year ago: ranked by severity.
Added
Mar 25, 2022
CISA deadline
21 days
CVSS severity
9.8 (critical)
Rank 3PHP
CVE-2019-11043
RansomwareCVE from 2019, added in 2022
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
Added
Mar 25, 2022
CISA deadline
21 days
CVSS severity
9.8 (critical)

Indicative classification, based on the vendor and product names given by CISA. How products are classified.