Security Digest
PHP: known exploited vulnerabilities
1 PHP CVE CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-07-07 | CVE-2016-10033 | PHP PHPMailer PHPMailer Command Injection Vulnerability | 2025-07-28 |