783 CVEs
5 in CISA KEV
php Vulnerabilities
CVE security advisories and vulnerability history for php.
783
Total CVEs
Published
5
In CISA KEV
Exploited in the wild
200
Public exploits
With known exploit
6.6
Avg CVSS
1999–2026
Overview
php has 783 published CVE records since 1999, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 200 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.
This page aggregates every publicly disclosed vulnerability (CVE) affecting php products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.