slug: php

Explanation

PHPはサーバーサイドで動くプログラミング言語で、Webサイトの裏側を作るのに広く使われています。 WordPress、Laravel、Drupalなど、世界中の多くのサイトの土台になっています。 セキュリティ脆弱性の文脈では「インジェクション系」(攻撃文字列を実行させる) や「ファイルアップロードの不備」が典型的な弱点として知られています。
📌 Example
2017年のEquifax事件 (1.4億人の個人情報流出) は、Apache StrutsというJavaライブラリの脆弱性が原因でしたが、同様にPHPアプリケーションでも脆弱性が悪用された事例は多数あります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 6,263

Image ID Title
CVE-2026-39545 Unsafe Deserialization in Zermatt (CVE-2026-39545)
CVE-2026-39539 Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.
CVE-2026-39567 Unsafe Deserialization in Santé (CVE-2026-39567)
CVE-2026-39578 Unsafe Deserialization in Valiance (CVE-2026-39578)
CVE-2026-39554 Unsafe Deserialization in Fidalgo (CVE-2026-39554)
CVE-2026-39573 Unsafe Deserialization in Mildhill (CVE-2026-39573)
CVE-2026-39529 Unsafe Deserialization in Elementra (CVE-2026-39529)
CVE-2026-39557 Unsafe Deserialization in NeoBeat (CVE-2026-39557)
CVE-2026-39577 Unsafe Deserialization in Playroom (CVE-2026-39577)
CVE-2026-39580 Unsafe Deserialization in Micdrop (CVE-2026-39580)
CVE-2026-27429 Unsafe Deserialization in Nifty (CVE-2026-27429)
CVE-2026-27870 Cross-Site Scripting (XSS) in Regesta Smart HD-PLC - TLDPH16D2 (CVE-2026-27870)
CVE-2026-27868 Vulnerability in Regesta Smart HD-PLC - TLDPH16D2 (CVE-2026-27868)
CVE-2026-39443 Unsafe Deserialization in EmallShop (CVE-2026-39443)
CVE-2026-39446 Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.
CVE-2026-12115 Unsafe Deserialization in WordPress (CVE-2026-12115)
CVE-2026-12256 Unsafe Deserialization in Avada (CVE-2026-12256)
CVE-2026-12165 Privilege Escalation in WordPress (CVE-2026-12165)
CVE-2025-69108 Unsafe Deserialization in Hot Coffee (CVE-2025-69108)
CVE-2025-69122 Unsafe Deserialization in SeaFood Company (CVE-2025-69122)
CVE-2025-60205 Unsafe Deserialization in ThemeREX Addons (CVE-2025-60205)
CVE-2026-52845 Authentication Bypass in github.com/caddyserver/caddy/v2 (CVE-2026-52845)
CVE-2026-6933 Unrestricted File Upload in Premmerce Dev Tools (WordPress plugin) (CVE-2026-6933)
CVE-2026-48157 Cross-Site Scripting (XSS) in slim/slim (CVE-2026-48157)
CVE-2026-49765 Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms,...
CVE-2026-49770 Unsafe Deserialization in WP Travel Engine (CVE-2026-49770)
CVE-2026-49781 Unsafe Deserialization in OttoKit (CVE-2026-49781)
CVE-2026-49768 Unsafe Deserialization in Happyforms (CVE-2026-49768)
CVE-2026-49769 Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions.
CVE-2026-9691 Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7,...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details