Login Request a demo
PH
Product
phpList
by phpList · last CVE Sep 16, 2026
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 6High 4Medium 21Low 1
Severity
All severities41Critical6High4Medium21Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add phpList to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-20032
9.8
1%
Jun 10
A vulnerability was found in PHPList 3.2.6
Affected: 3.2.6
CVE-2017-20029
9.8
21%
Jun 10
A vulnerability was found in PHPList 3.2.6 and classified as critical
Affected: 3.2.6
CVE-2020-22249
9.8
3%
Jul 6
Remote Code Execution vulnerability in phplist 3.5.1
Affected: 3.5.1
CVE-2020-23361
9.8
1%
Jan 27
phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively…
Affected: 3.5.3
CVE-2021-3188
9.8
2%
Jan 26
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports
Affected: 3.6.0
CVE-2020-8547
9.8
6%
Feb 3
phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively…
Affected: 3.5.0
Showing 6