PH
Product
Phpmailer
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 2Low 0
Watch
Add Phpmailer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-19296 | 8.8 | Nov 16 | PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack Affected: before 5.2.27; 6.0.0 before 6.0.6 |
| CVE-2021-3603 | 8.1 | Jun 17 | PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is injected into the host project's scope by other means) Affected: through 6.4.1 |
| CVE-2021-34551 | 8.1 | Jun 16 | PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname Affected: before 6.5.0 |
| CVE-2020-13625 | 7.5 | Jun 8 | PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character Affected: before 6.1.6 |
Showing 4