Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
400,124CVE records
3,220Published, last 7 days
1,730In CISA KEV
1,478Critical, last 30 days
5,599Analysed
03:16 UTCLast NVD sync
Filters Show:
21 results. Thinkphp Thinkphp.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-25270 | Critical | 9.3 |  Thinkphp | Insecure direct object reference | - | 1 ref | 0.89% | Apr 22, 2026 |
| CVE-2025-63888 | Critical | 9.8 | Thinkphp | PHP remote file inclusion | - | - | 0.57% | Nov 20, 2025 |
| CVE-2025-50707 | Critical | 9.8 | Thinkphp | Code injection | - | 2 refs | 1.0% | Aug 5, 2025 |
| CVE-2025-50706 | Critical | 9.8 | Thinkphp | Code injection | - | 2 refs | 1.0% | Aug 5, 2025 |
| CVE-2024-48112 | Critical | 9.8 | Thinkphp | Deserialization of untrusted data | - | 1 ref | 0.89% | Oct 30, 2024 |
| CVE-2024-44902 | Critical | 9.8 | Thinkphp | Deserialization of untrusted data | - | - | 4.2% | Sep 9, 2024 |
| CVE-2022-45982 | Critical | 9.8 | Thinkphp | Deserialization of untrusted data | - | 2 refs | 1.2% | Feb 8, 2023 |
| CVE-2022-47945 | Critical | 9.8 | Thinkphp | Path traversal | - | 2 refs | 28% | Dec 23, 2022 |
| CVE-2022-38352 | Critical | 9.8 | Thinkphp | Deserialization of untrusted data | - | 2 refs | 21% | Sep 15, 2022 |
| CVE-2022-33107 | Critical | 9.8 | Thinkphp | Deserialization of untrusted data | - | 2 refs | 24% | Jun 29, 2022 |
| CVE-2021-23592 | Critical | 9.8 | Thinkphp | Deserialization of untrusted data | - | - | 1.7% | May 6, 2022 |
| CVE-2021-44350 | Critical | 9.8 | Thinkphp | SQL injection | - | 2 refs | 1.4% | Dec 15, 2021 |
| CVE-2021-36567 | Critical | 9.8 | Thinkphp | Deserialization of untrusted data | - | 2 refs | 2.5% | Dec 6, 2021 |
| CVE-2021-36564 | Critical | 9.8 | Thinkphp | Deserialization of untrusted data | - | 2 refs | 1.9% | Dec 6, 2021 |
| CVE-2020-20120 | Critical | 9.8 | Thinkphp | SQL injection | - | 2 refs | 1.8% | Sep 28, 2021 |
| CVE-2018-18546 | Critical | 9.8 | Thinkphp | SQL injection | - | 2 refs | 1.7% | Oct 21, 2018 |
| CVE-2018-18530 | Critical | 9.8 | Thinkphp | SQL injection | - | 2 refs | 1.2% | Oct 19, 2018 |
| CVE-2018-18529 | Critical | 9.8 | Thinkphp | SQL injection | - | 2 refs | 1.2% | Oct 19, 2018 |
| CVE-2018-17566 | Critical | 9.8 | Thinkphp | SQL injection | - | 2 refs | 1.5% | Sep 26, 2018 |
| CVE-2018-16385 | Critical | 9.8 | Thinkphp | SQL injection | - | 2 refs | 2.2% | Sep 3, 2018 |
