Skip to content

Vendor

PHP vulnerabilities under active attack

3 PHP vulnerabilities have confirmed evidence of exploitation in the wild, and 1 is used in ransomware campaigns.

3 confirmed exploited

1 used in ransomware

3 past fix deadline

CVE-2016-10033 PHPMailer Command Injection Vulnerability PHP · PHPMailer Weaponised CVSS 9.8 EPSS 100% 07 Jul 2025
CVE-2019-11043 PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability PHP · FastCGI Process Manager (FPM) Used in ransomware CVSS 8.7 EPSS 99% 25 Mar 2022
CVE-2012-1823 PHP-CGI Query String Parameter Vulnerability PHP · PHP Weaponised CVSS 9.8 EPSS 100% 25 Mar 2022