Login Request a demo
PH
Product
phpList
by phpList · last CVE Sep 16, 2026
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 6High 4Medium 21Low 1
Severity
All severities41Critical6High4Medium21Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add phpList to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15072
8.8
1%
Jul 8
An issue was discovered in phpList through 3.5.4
Affected: through 3.5.4
CVE-2026-92806
8.1
0%
Sep 16
phpList before 3.6.17 Cross-Site Request Forgery via massremove.php
Affected: before 3.6.17
CVE-2017-20030
7.2
1%
Jun 10
A vulnerability was found in PHPList 3.2.6
Affected: 3.2.6
CVE-2020-35708
7.2
1%
Dec 25
phpList 3.5.9 allows SQL injection by admins who provide a crafted fourth line of a file to the "Config - Import Administrators" page
Affected: 3.5.9
Showing 4