PHPMailer
Security incidents tagged PHPMailer. Newest first.
0 PHPMailer incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 472
- Longest quiet run: 472 days (Jul 8–Oct 22)
Show 1 older incident1 older incident
July 2025 1
CriticalPHPMailer: PHPMailer Command Injection VulnerabilityPatched
PHPMailer Patched
PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition. Added to CISA KEV on 2025-07-07.
Open incident →CVE-2016-10033
