Exploited vulnerabilities
PHP
3 PHP vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue3
Last 12 months0
In ransomware campaigns1
Last addition7 July 2025
The vulnerabilities3
- 7 July 2025CVE-2016-10033PHPMailerPHPMailer Command Injection Vulnerability
- 25 March 2022CVE-2019-11043FastCGI Process Manager (FPM)PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityRansomware
- 25 March 2022CVE-2012-1823PHPPHP-CGI Query String Parameter Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, PHP included.