794 CVEs
5 in CISA KEV
PHP Vulnerabilities
CVE security advisories and vulnerability history for PHP.
794
Total CVEs
Published
5
In CISA KEV
Exploited in the wild
202
Public exploits
PoC or exploit code
CVE security advisories and vulnerability history for PHP.
PHP has 794 published CVE records since 1999, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 202 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting PHP products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
A quick read on PHP's vulnerability posture, as a share of its 794 published CVEs.
across 794 scored CVEs
443 of 794 scored
5 of 794 CVEs
202 of 794 CVEs
564 of 794 CVEs
How the CVSS severity of PHP's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
5
5 of PHP's CVEs are confirmed exploited in the wild.
Public exploits
202
202 of PHP's CVEs have a known public exploit available.
The PHP products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in PHP CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish PHP CVE records.
How many PHP CVEs were published each year.
The most recently disclosed vulnerabilities affecting PHP.
Browse vulnerabilities for other tracked vendors.
Common questions about PHP vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new PHP vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
Track new PHP CVEs as they are disclosed and get AI-written analysis and remediation guidance.
Monitor PHP CVEs