phpbb
Security Risk Profile
50
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 70 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 31, 2001 to present
70
Total CVEs
35
Critical+High
0
Exploited
24
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
24
Critical/High
Risk Level
50/100
medium
Severity Distribution
Critical
6High
29Medium
35Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
12
2
Code Injection
12
3
CSRF
9
4
XSS
6
5
Infoleak
5
Most Affected Products
1. phpBB phpbb106
2. Phpbb Group Phpbb23
3. composer/phpbb/phpbb16
4. phpBB IP-Tracking10
5. phpbb phpbb6
Recent Vulnerabilities
See more →CVE-2026-48613
CVSS 7.1high
6/12/2026🔧 No Patch
CVE-2026-29199
CVSS 8.1high
5/4/2026🔧 No Patch
CVE-2025-70810
CVSS 8.8high
4/9/2026🔧 No Patch
CVE-2025-70811
CVSS 4.3medium
4/9/2026🔧 No Patch
CVE-2019-25685
CVSS 8.7high
phpBB Arbitrary File Upload via Phar Deserialization
4/5/2026🔧 No Patch
CVE-2023-5917
CVSS 6.1EPSS 0%medium
phpBB Smiley Pack acp_icons.php main cross site scripting
11/2/2023
CVE-2020-8226
CVSS 5.8medium
7/25/2020
CVE-2019-16108
CVSS 7.5high
3/19/2020
CVE-2019-16107
CVSS 4.3medium
3/11/2020
CVE-2020-5502
CVSS 6.5medium
1/14/2020🔧 No Patch
Monitor phpbb in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.