27 CVEs
1 in CISA KEV
thinkphp Vulnerabilities
CVE security advisories and vulnerability history for thinkphp.
27
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
10
Public exploits
With known exploit
8.7
Avg CVSS
2018–2026
Overview
thinkphp has 27 published CVE records since 2018, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 8.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting thinkphp products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.