slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,978

Image ID Title
CVE-2026-81344 Vulnerability in ACF Frontend Admin by DynamiApps (WordPress plugin) (CVE-2026-81344)
CVE-2026-108123 Vulnerability in WP Booking System – Booking Calendar (WordPress plugin) (CVE-2026-108123)
CVE-2026-104736 Unsafe Deserialization in LearnPress (WordPress plugin) (CVE-2026-104736)
CVE-2026-104734 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...
CVE-2026-30971 OS Command Injection in ZoneMinder (CVE-2026-30971)
CVE-2026-102607 OS Command Injection in ZoneMinder (CVE-2026-102607)
CVE-2026-111628 Unsafe Deserialization in 10up Distributor (CVE-2026-111628)
CVE-2026-111619 SQL Injection in FilePress (CVE-2026-111619)
CVE-2026-93681 Cross-Site Scripting (XSS) in Tutor LMS – eLearning and online course solution (WordPress plugin) (CVE-2026-93681)
CVE-2026-111472 An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow...
CVE-2026-111311 Unrestricted File Upload in WordPress (CVE-2026-111311)
CVE-2026-100106 Cross-Site Scripting (XSS) in FiboSearch – Ajax Search for WooCommerce (WordPress plugin) (CVE-2026-100106)
CVE-2026-104730 Unsafe Deserialization in WordPress (CVE-2026-104730)
CVE-2026-107770 Vulnerability in Photo Engine (WordPress plugin) (CVE-2026-107770)
CVE-2026-12272 Vulnerability in WordPress (CVE-2026-12272)
CVE-2026-100158 Cross-Site Scripting (XSS) in SQL Chart Builder (WordPress plugin) (CVE-2026-100158)
CVE-2026-104932 Unsafe Deserialization in Search Regex (WordPress plugin) (CVE-2026-104932)
CVE-2026-103896 Path Traversal in WordPress (CVE-2026-103896)
CVE-2026-109998 Cross-Site Scripting (XSS) in Mang Board (WordPress plugin) (CVE-2026-109998)
CVE-2026-104798 Privilege Escalation in My Calendar – Accessible Event Manager (WordPress plugin) (CVE-2026-104798)
CVE-2026-111114 Privilege Escalation in WordPress (CVE-2026-111114)
CVE-2026-109221 Path Traversal in Groundhogg — CRM, Newsletters, and Marketing Automation (WordPress plugin) (CVE-2026-109221)
CVE-2026-111348 Vulnerability in Likeshop (CVE-2026-111348)
CVE-2026-111284 Cross-Site Scripting (XSS) in Aureus ERP (CVE-2026-111284)
CVE-2026-111233 Cross-Site Scripting (XSS) in Netgate pfSense CE (CVE-2026-111233)
CVE-2026-111228 Vulnerability in Netgate pfSense CE (CVE-2026-111228)
CVE-2026-111231 Authorization Flaw in Netgate pfSense CE (CVE-2026-111231)
CVE-2026-111229 pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in...
CVE-2026-111230 Vulnerability in Netgate pfSense CE (CVE-2026-111230)
CVE-2026-111221 Vulnerability in Netgate pfSense CE (CVE-2026-111221)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details