WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Splendour versions = 1.23...

WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Stargaze versions = 1.10...

WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Tipsy versions = 1.6...

WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Wine House versions = 3.20...

WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Yacht Rental versions = 2.6...

CVE-2025-15700

The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly...

CVE-2022-31626-CVE-2024-2961-CVE-2019-6977

CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...

EUVD-2025-211055

The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly...

php-reverse-shell

php-reverse-shell...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detecta archivos PHP potencialmente maliciosos. ¿Qué detecta? PHP-malware-finder hace todo lo posible para detectar código ofuscado/sospechoso, así com...

CLEANSTART-2026-AU05968 PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name

Security vulnerability affects the php package. PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name...

CLEANSTART-2026-GS69152 When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, ...

Security vulnerability affects the php package. When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a different port, or a downgrade from HTTPS to HTTP...

CLEANSTART-2026-JC19240 php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl

Security vulnerability affects the php package. phpopensslmatcheswildcardname in ext/openssl/xpssl...

CLEANSTART-2026-NP31070 When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location

Security vulnerability affects the php package. When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location...

CLEANSTART-2026-XM64150 IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen

Security vulnerability affects the php package. The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen...

CLEANSTART-2026-PP41218 cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit

Security vulnerability affects the php package. cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit...

CLEANSTART-2026-HM12202 convert

Security vulnerability affects the php package. The convert...

CLEANSTART-2026-OZ96009 Security fix for GHSA-ch8v-r6jh-4vvr applied in: php 8.3.35-r0

Security vulnerability affects the php package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UY82629 mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them

Security vulnerability affects the php package. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them...

CLEANSTART-2026-WW44198 SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger

Security vulnerability affects the php package. The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger...