Thinkphp vulnerabilities

Products

• Thinkphp 27

Newest

• thinkphp ThinkPHP 5.0.23 Remote Code Execution via invokefunction CVE-2018-25270 9.3 CriticalApril 22, 2026
• thinkphp The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows... CVE-2025-63889 7.5 HighNovember 20, 2025
• thinkphp The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24... CVE-2025-63888 Public exploit 9.8 CriticalNovember 20, 2025
• thinkphp An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index... CVE-2025-50707 9.8 CriticalAugust 5, 2025
• thinkphp ThinkPHP Path Traversal Vulnerability CVE-2025-50706 9.8 CriticalAugust 5, 2025
• thinkphp ThinkPHP deserialization vulnerability CVE-2024-48112 9.8 CriticalOctober 30, 2024
• thinkphp ThinkPHP deserialization vulnerability CVE-2024-44902 Public exploit 9.8 CriticalSeptember 9, 2024
• thinkphp ThinkPHP Cross-Site Scripting Vulnerability CVE-2024-34467 Fix available 6.1 MediumMay 4, 2024
• thinkphp Deserialization of Untrusted Data in thinkphp CVE-2022-45982 9.8 CriticalFebruary 8, 2023
• thinkphp ThinkPHP Framework vulnerable to remote code execution CVE-2022-47945 Fix available EPSS 30.2% 9.8 CriticalDecember 23, 2022
• thinkphp Thinkphp has a code logic error CVE-2022-44289 8.8 HighDecember 6, 2022
• thinkphp ThinkPHP deserialization vulnerability CVE-2022-38352 EPSS 21.0% 9.8 CriticalSeptember 15, 2022
• thinkphp Deserialization of Untrusted Data in topthink/framework CVE-2022-33107 EPSS 23.9% 9.8 CriticalJune 29, 2022
• thinkphp Deserialization of Untrusted Data CVE-2021-23592 Fix available 7.7 HighMay 6, 2022
• thinkphp Exposure of Resource to Wrong Sphere in ThinkPHP Framework CVE-2022-25481 Disputed 7.5 HighMarch 20, 2022
• thinkphp ThinkPHP Remote Code Execution (RCE) vulnerability CVE-2021-44892 8.8 HighFebruary 10, 2022
• thinkphp ThinkPHP5 SQL Injection vulnerability CVE-2021-44350 9.8 CriticalDecember 15, 2021
• thinkphp Deserialization of Untrusted Data in topthink/framework CVE-2021-36567 9.8 CriticalDecember 6, 2021
• thinkphp Deserialization of Untrusted Data in topthink/framework CVE-2021-36564 Fix available 9.8 CriticalDecember 6, 2021
• thinkphp SQL Injection in topthink/thinkphp CVE-2020-20120 9.8 CriticalSeptember 28, 2021
• thinkphp, opensourcebms open source background management system, zzzcms zzzphp +2 more ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote... CVE-2019-9082 In KEVPublic exploit EPSS 97.4% 8.8 HighFebruary 24, 2019
• 5none nonecms An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers... CVE-2018-20062 In KEVPublic exploit EPSS 99.5% 9.8 CriticalDecember 11, 2018
• thinkphp ThinkPHP SQLi Vulnerability CVE-2018-18546 9.8 CriticalOctober 21, 2018
• thinkphp ThinkPHP SQLi Vulnerability CVE-2018-18530 9.8 CriticalOctober 19, 2018
• thinkphp ThinkPHP SQLi Vulnerability CVE-2018-18529 9.8 CriticalOctober 19, 2018
• thinkphp ThinkPHP SQL injection vulnerability CVE-2018-17566 9.8 CriticalSeptember 26, 2018
• thinkphp ThinkPHP SQL Injection vulnerability CVE-2018-16385 Public exploitFix available 9.8 CriticalSeptember 3, 2018
• thinkphp thinkphp SQL Injection via the index.php s parameter CVE-2018-10225 9.8 CriticalApril 19, 2018