Security Risk Category

php Security Risks

Published vulnerability pages connected to php. One risk can appear in multiple categories while keeping one canonical page.

php risks

Showing 3 of 3 published risks.

criticalCISA KEVEPSS 0.014

JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

CVE-2026-48908phpsp-page-builder

Updated Jul 9, 2026

criticalCISA KEVEPSS 0.804

Widget Factory Joomla Content Editor Improper Access Control Vulnerability

Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users.

CVE-2026-48907phpjoomla-content-editor

Updated Jul 9, 2026

criticalCISA KEVEPSS 0.275

Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.

CVE-2026-45247phpmirasvit-full-page-cache-warmer

Updated Jul 9, 2026