p
phpmailer project
Security Risk Profile
80
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 1, 2015 to present
10
Total CVEs
7
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
80/100
critical
Severity Distribution
Critical
3High
4Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Command Injection
2
2
Malicious File Upload
1
3
Code Injection
1
4
XSS
1
5
Infoleak
1
Most Affected Products
1. WordPress WordPress24
2. composer/phpmailer/phpmailer20
3. PHPMailer project PHPMailer12
4. alpine/cacti12
5. Fedoraproject Fedora8
Recent Vulnerabilities
See more →CVE-2021-34551
CVSS 8.1high
RCE affecting Windows hosts via UNC paths to translation files
Jun 16, 2021
CVE-2021-3603
CVSS 8.1high
Untrusted code may be run from an overridden address validator
Jun 16, 2021
CVE-2020-36326
CVSS 9.8critical
Object injection via local phar file
Apr 28, 2021
CVE-2020-13625
CVSS 7.5high
Insufficient output escaping of attachment names in PHPMailer
May 27, 2020
CVE-2018-19296
CVSS 8.8high
Object injection
Jul 26, 2017
CVE-2017-11503
CVSS 6.1medium
XSS vulnerability in code example
Jul 20, 2017
CVE-2016-10045
CVSS 9.8critical
Remote Code Execution
Dec 28, 2016
CVE-2016-10033
CVSS 9.8critical
Remote Code Execution
Dec 23, 2016
CVE-2017-5223
CVSS 5.5medium
Local File Disclosure
Jan 6, 2016
CVE-2015-8476
CVSS 5.0medium
Multiple CRLF injection vulnerabilities
Nov 1, 2015
Monitor phpmailer project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.