slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 5,978

Image ID Title
CVE-2026-62124 Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVE-2026-62120 Unsafe Deserialization in Law Office (CVE-2026-62120)
CVE-2026-62130 Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVE-2026-62077 Unsafe Deserialization in Avala (CVE-2026-62077)
CVE-2026-62076 Unsafe Deserialization in Kalles (CVE-2026-62076)
CVE-2026-62090 Unsafe Deserialization in WineShop (CVE-2026-62090)
CVE-2026-62086 Unsafe Deserialization in Juno (CVE-2026-62086)
CVE-2026-62087 Unsafe Deserialization in Equadio (CVE-2026-62087)
CVE-2026-62050 Unsafe Deserialization in Splendour (CVE-2026-62050)
CVE-2026-62053 Unsafe Deserialization in Wine House (CVE-2026-62053)
CVE-2026-62051 Unsafe Deserialization in Stargaze (CVE-2026-62051)
CVE-2026-62054 Unsafe Deserialization in Yacht Rental (CVE-2026-62054)
CVE-2026-62052 Unsafe Deserialization in Tipsy (CVE-2026-62052)
CVE-2026-62021 Unsafe Deserialization in Angio (CVE-2026-62021)
CVE-2026-42723 Unsafe Deserialization in CleanSkin (CVE-2026-42723)
CVE-2026-42719 Unsafe Deserialization in Dynamic User Directory (CVE-2026-42719)
CVE-2026-42716 Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.
CVE-2026-42718 Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.
CVE-2026-108591 Vulnerability in InnoShop (CVE-2026-108591)
CVE-2026-108546 OS Command Injection in Spotweb (CVE-2026-108546)
CVE-2026-108164 Vulnerability in Open Source Social Network (CVE-2026-108164)
CVE-2026-104722 Path Traversal in WordPress (CVE-2026-104722)
CVE-2026-96840 Cross-Site Scripting (XSS) in Post Grid Gutenberg Blocks – PostX (WordPress plugin) (CVE-2026-96840)
CVE-2026-12626 Unsafe Deserialization in Online Scheduling and Appointment Booking System – Bookly (WordPress plugin) (CVE-2026-12626)
CVE-2026-104006 Vulnerability in SpeedyCache – Cache, Optimization, Performance (WordPress plugin) (CVE-2026-104006)
CVE-2026-104801 Path Traversal in WordPress (CVE-2026-104801)
CVE-2026-94375 Vulnerability in Order Export & Order Import for WooCommerce (WordPress plugin) (CVE-2026-94375)
CVE-2026-104899 Vulnerability in WordPress (CVE-2026-104899)
CVE-2026-104752 Unrestricted File Upload in Rank Math SEO (WordPress plugin) (CVE-2026-104752)
CVE-2026-104723 Unsafe Deserialization in WordPress (CVE-2026-104723)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details