PHP
CVEs currently on EVULNABLE's Priority Feed for PHP, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 3 PHP CVEs in EVULNABLE's ranked feed.
#1 94 Immediate CVE-2019-11043 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV PHP — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability KEV + ransomware, EPSS 99.7%
EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 88 Immediate CVE-2016-10033 ExigentKEV since 2025 · listed over a yearCISA KEV PHP — PHPMailer Command Injection Vulnerability KEV, EPSS 99.7%
EVRS 88/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#3 87 Immediate CVE-2012-1823 ExigentKEV since 2022 · listed over a yearCISA KEV PHP — PHP-CGI Query String Parameter Vulnerability KEV, EPSS 99.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.