CVE security advisories and vulnerability history for thinkphp by top-think.
Last updated
top-think thinkphp has 7 published CVE records since 2018, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 9.6.
This page aggregates every publicly disclosed vulnerability (CVE) affecting top-think thinkphp, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of top-think thinkphp's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
5 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of top-think thinkphp's CVEs is confirmed exploited in the wild.
Public exploits
2
2 of top-think thinkphp's CVEs have a known public exploit available.
Browse every top-think thinkphp version named in a CVE, then pick one to see only the CVEs that affect it.
7 CVEs
Added to CISA KEV 2021-11-03
The CWE weakness categories most often found in top-think thinkphp CVEs. Follow any weakness for its full explanation.
How many top-think thinkphp CVEs were published each year.
Browse vulnerabilities for other products by top-think.
Common questions about top-think thinkphp vulnerabilities.
top-think thinkphp has 7 published CVE records since 2018.
Yes — 1 of top-think thinkphp's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 2 of top-think thinkphp's CVEs have a known public exploit.
13 distinct top-think thinkphp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
top-think thinkphp's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
top-think thinkphp has 2 critical and 0 high-severity CVEs.
The average CVSS base score across top-think thinkphp's scored CVEs is 9.6.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new top-think thinkphp vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
