PHP
3 CVEs in CISA KEV — 1 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2016-10033 |
PHPMailer | — | — | 2025-07-07 | 2025-07-28 | PHPMailer contains a command injection vulnerability because it fails to sanitiz | |
CVE-2019-11043 |
FastCGI Process Manager (FPM) | — | — | 2022-03-25 | 2022-04-15 | RW | In some versions of PHP in certain configurations of FPM setup, it is possible t |
CVE-2012-1823 |
PHP | — | — | 2022-03-25 | 2022-04-15 | sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly h |