ESLog inGet started free

PHP vulnerabilities affecting PrestaShop shops

29 recent high or critical advisories for the PHP interpreter itself, grouped by branch. PrestaShield checks them against the PHP version of each shop's server.

This is a flaw in the PHP interpreter itself, not in PrestaShop: it is fixed by changing the PHP version in the hosting panel (cPanel, Plesk…). On Debian and Ubuntu the version number may not change even though the patch is applied (backport): confirm with your host before treating the shop as affected.

PHP 8.5 17PHP 8.4 21PHP 8.3 25PHP 8.2 24PHP 8.1 13PHP 8.0 1

PHP 8.5 · 17

IDAdvisorySeverityAffected versionsPublishedFix
CVE-2026-109619 PHP has various global state that temporarily points into request memory. Critical 9.2 ≥ 5.4.0 < 8.2.35
≥ 8.3.0 < 8.3.36
≥ 8.4.0 < 8.4.27
+1 2026-10-21 No
CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Critical 9.8 ≥ 7.3.0 < 8.2.35
≥ 8.3.0 < 8.3.36
≥ 8.4.0 < 8.4.27
+1 2026-10-21 No
CVE-2026-91765 cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. High 7.5 ≥ 8.2.0 < 8.2.34
≥ 8.3.0 < 8.3.35
≥ 8.4.0 < 8.4.26
+1 2026-09-25 No
CVE-2026-17544 Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP… Critical 9.8 ≥ 8.4.0 < 8.4.24
≥ 8.5.0 < 8.5.9 2026-07-30 No
CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions… Critical 9.8 ≥ 8.2.0 < 8.2.33
≥ 8.3.0 < 8.3.33
≥ 8.4.0 < 8.4.24
+1 2026-07-30 No
CVE-2026-7263 In PHP versions 8.4. before 8.4.21 and 8.5. High 7.5 ≥ 8.4.0 < 8.4.21
≥ 8.5.0 < 8.5.6 2026-05-10 No
CVE-2026-6104 In PHP versions 8.4. before 8.4.21 and 8.5. Critical 9.1 ≥ 8.4.0 < 8.4.21
≥ 8.5.0 < 8.5.6 2026-05-10 No
CVE-2026-7568 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7262 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7261 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7258 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.21
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-6735 In PHP versions 8.2. before 8.2.31, 8.3. High 7.3 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-6722 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2025-14179 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2025-14180 In PHP versions 8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14178 In PHP versions:8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14177 In PHP versions:8.1. before 8.1.34, 8.2. High 7.5 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No

PHP 8.4 · 21

IDAdvisorySeverityAffected versionsPublishedFix
CVE-2026-109619 PHP has various global state that temporarily points into request memory. Critical 9.2 ≥ 5.4.0 < 8.2.35
≥ 8.3.0 < 8.3.36
≥ 8.4.0 < 8.4.27
+1 2026-10-21 No
CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Critical 9.8 ≥ 7.3.0 < 8.2.35
≥ 8.3.0 < 8.3.36
≥ 8.4.0 < 8.4.27
+1 2026-10-21 No
CVE-2026-91765 cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. High 7.5 ≥ 8.2.0 < 8.2.34
≥ 8.3.0 < 8.3.35
≥ 8.4.0 < 8.4.26
+1 2026-09-25 No
CVE-2026-17544 Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP… Critical 9.8 ≥ 8.4.0 < 8.4.24
≥ 8.5.0 < 8.5.9 2026-07-30 No
CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions… Critical 9.8 ≥ 8.2.0 < 8.2.33
≥ 8.3.0 < 8.3.33
≥ 8.4.0 < 8.4.24
+1 2026-07-30 No
CVE-2026-7263 In PHP versions 8.4. before 8.4.21 and 8.5. High 7.5 ≥ 8.4.0 < 8.4.21
≥ 8.5.0 < 8.5.6 2026-05-10 No
CVE-2026-6104 In PHP versions 8.4. before 8.4.21 and 8.5. Critical 9.1 ≥ 8.4.0 < 8.4.21
≥ 8.5.0 < 8.5.6 2026-05-10 No
CVE-2026-7568 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7262 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7261 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7258 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.21
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-6735 In PHP versions 8.2. before 8.2.31, 8.3. High 7.3 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-6722 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2025-14179 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2025-14180 In PHP versions 8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14178 In PHP versions:8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14177 In PHP versions:8.1. before 8.1.34, 8.2. High 7.5 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-1735 In PHP versions:8.1. before 8.1.33, 8.2. High 7.5 ≥ 8.1.0 < 8.1.33
≥ 8.2.0 < 8.2.29
≥ 8.3.0 < 8.3.23
+1 2025-07-13 No
CVE-2024-11235 In PHP versions 8.3. before 8.3.19 and 8.4. Critical 9.2 ≥ 8.3.0 < 8.3.19
≥ 8.4.0 < 8.4.5 2025-04-04 No
CVE-2025-1861 In PHP from 8.1. before 8.1.32, from 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14
+1 2025-03-30 No
CVE-2025-1736 In PHP from 8.1. before 8.1.32, from 8.2. High 7.3 ≥ 8.1.0 < 8.1.32
≥ 8.2.0 < 8.2.28
≥ 8.3.0 < 8.3.19
+1 2025-03-30 No

PHP 8.3 · 25

IDAdvisorySeverityAffected versionsPublishedFix
CVE-2026-109619 PHP has various global state that temporarily points into request memory. Critical 9.2 ≥ 5.4.0 < 8.2.35
≥ 8.3.0 < 8.3.36
≥ 8.4.0 < 8.4.27
+1 2026-10-21 No
CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Critical 9.8 ≥ 7.3.0 < 8.2.35
≥ 8.3.0 < 8.3.36
≥ 8.4.0 < 8.4.27
+1 2026-10-21 No
CVE-2026-91765 cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. High 7.5 ≥ 8.2.0 < 8.2.34
≥ 8.3.0 < 8.3.35
≥ 8.4.0 < 8.4.26
+1 2026-09-25 No
CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions… Critical 9.8 ≥ 8.2.0 < 8.2.33
≥ 8.3.0 < 8.3.33
≥ 8.4.0 < 8.4.24
+1 2026-07-30 No
CVE-2026-7568 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7262 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7261 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7258 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.21
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-6735 In PHP versions 8.2. before 8.2.31, 8.3. High 7.3 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-6722 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2025-14179 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2025-14180 In PHP versions 8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14178 In PHP versions:8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14177 In PHP versions:8.1. before 8.1.34, 8.2. High 7.5 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-1735 In PHP versions:8.1. before 8.1.33, 8.2. High 7.5 ≥ 8.1.0 < 8.1.33
≥ 8.2.0 < 8.2.29
≥ 8.3.0 < 8.3.23
+1 2025-07-13 No
CVE-2024-11235 In PHP versions 8.3. before 8.3.19 and 8.4. Critical 9.2 ≥ 8.3.0 < 8.3.19
≥ 8.4.0 < 8.4.5 2025-04-04 No
CVE-2025-1861 In PHP from 8.1. before 8.1.32, from 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14
+1 2025-03-30 No
CVE-2025-1736 In PHP from 8.1. before 8.1.32, from 8.2. High 7.3 ≥ 8.1.0 < 8.1.32
≥ 8.2.0 < 8.2.28
≥ 8.3.0 < 8.3.19
+1 2025-03-30 No
CVE-2024-11233 In PHP versions 8.1. before 8.1.31, 8.2. High 8.2 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-11236 In PHP versions 8.1. before 8.1.31, 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-11234 In PHP versions 8.1. before 8.1.31, 8.2. High 7.2 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-8932 In PHP versions 8.1. before 8.1.31, 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-22 No
CVE-2024-5585 In PHP versions 8.1. before 8.1.29, 8.2. High 8.8 ≥ 8.1.0 < 8.1.29
≥ 8.2.0 < 8.2.20
≥ 8.3.0 < 8.3.8 2024-06-09 No
CVE-2024-2757 In PHP 8.3.* before 8.3.5, function mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of… High 7.5 ≥ 8.3.0 < 8.3.5 2024-04-29 No
CVE-2024-1874 In PHP versions 8.1. before 8.1.28, 8.2. Critical 9.4 ≥ 8.1.0 < 8.1.28
≥ 8.2.0 < 8.2.18
≥ 8.3.0 < 8.3.5 2024-04-29 No

PHP 8.2 · 24

IDAdvisorySeverityAffected versionsPublishedFix
CVE-2026-109619 PHP has various global state that temporarily points into request memory. Critical 9.2 ≥ 5.4.0 < 8.2.35
≥ 8.3.0 < 8.3.36
≥ 8.4.0 < 8.4.27
+1 2026-10-21 No
CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Critical 9.8 ≥ 7.3.0 < 8.2.35
≥ 8.3.0 < 8.3.36
≥ 8.4.0 < 8.4.27
+1 2026-10-21 No
CVE-2026-91765 cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. High 7.5 ≥ 8.2.0 < 8.2.34
≥ 8.3.0 < 8.3.35
≥ 8.4.0 < 8.4.26
+1 2026-09-25 No
CVE-2026-17543 Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions… Critical 9.8 ≥ 8.2.0 < 8.2.33
≥ 8.3.0 < 8.3.33
≥ 8.4.0 < 8.4.24
+1 2026-07-30 No
CVE-2026-7568 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7262 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7261 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-7258 In PHP versions 8.2. before 8.2.31, 8.3. High 7.5 ≥ 8.2.0 < 8.2.21
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-6735 In PHP versions 8.2. before 8.2.31, 8.3. High 7.3 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2026-6722 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2025-14179 In PHP versions 8.2. before 8.2.31, 8.3. Critical 9.8 ≥ 8.2.0 < 8.2.31
≥ 8.3.0 < 8.3.31
≥ 8.4.0 < 8.4.21
+1 2026-05-10 No
CVE-2025-14180 In PHP versions 8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14178 In PHP versions:8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14177 In PHP versions:8.1. before 8.1.34, 8.2. High 7.5 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-1735 In PHP versions:8.1. before 8.1.33, 8.2. High 7.5 ≥ 8.1.0 < 8.1.33
≥ 8.2.0 < 8.2.29
≥ 8.3.0 < 8.3.23
+1 2025-07-13 No
CVE-2025-1861 In PHP from 8.1. before 8.1.32, from 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14
+1 2025-03-30 No
CVE-2025-1736 In PHP from 8.1. before 8.1.32, from 8.2. High 7.3 ≥ 8.1.0 < 8.1.32
≥ 8.2.0 < 8.2.28
≥ 8.3.0 < 8.3.19
+1 2025-03-30 No
CVE-2022-31631 In PHP versions 8.0. before 8.0.27, 8.1. Critical 9.1 ≥ 8.0.0 < 8.0.27
≥ 8.1.0 < 8.1.15
≥ 8.2.0 < 8.2.2 2025-02-12 No
CVE-2024-11233 In PHP versions 8.1. before 8.1.31, 8.2. High 8.2 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-11236 In PHP versions 8.1. before 8.1.31, 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-11234 In PHP versions 8.1. before 8.1.31, 8.2. High 7.2 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-8932 In PHP versions 8.1. before 8.1.31, 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-22 No
CVE-2024-5585 In PHP versions 8.1. before 8.1.29, 8.2. High 8.8 ≥ 8.1.0 < 8.1.29
≥ 8.2.0 < 8.2.20
≥ 8.3.0 < 8.3.8 2024-06-09 No
CVE-2024-1874 In PHP versions 8.1. before 8.1.28, 8.2. Critical 9.4 ≥ 8.1.0 < 8.1.28
≥ 8.2.0 < 8.2.18
≥ 8.3.0 < 8.3.5 2024-04-29 No

PHP 8.1 · 13

IDAdvisorySeverityAffected versionsPublishedFix
CVE-2025-14180 In PHP versions 8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14178 In PHP versions:8.1. before 8.1.34, 8.2. High 8.2 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-14177 In PHP versions:8.1. before 8.1.34, 8.2. High 7.5 ≥ 8.1.0 < 8.1.34
≥ 8.2.0 < 8.2.30
≥ 8.3.0 < 8.3.29
+2 2025-12-27 No
CVE-2025-1735 In PHP versions:8.1. before 8.1.33, 8.2. High 7.5 ≥ 8.1.0 < 8.1.33
≥ 8.2.0 < 8.2.29
≥ 8.3.0 < 8.3.23
+1 2025-07-13 No
CVE-2025-1861 In PHP from 8.1. before 8.1.32, from 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14
+1 2025-03-30 No
CVE-2025-1736 In PHP from 8.1. before 8.1.32, from 8.2. High 7.3 ≥ 8.1.0 < 8.1.32
≥ 8.2.0 < 8.2.28
≥ 8.3.0 < 8.3.19
+1 2025-03-30 No
CVE-2022-31631 In PHP versions 8.0. before 8.0.27, 8.1. Critical 9.1 ≥ 8.0.0 < 8.0.27
≥ 8.1.0 < 8.1.15
≥ 8.2.0 < 8.2.2 2025-02-12 No
CVE-2024-11233 In PHP versions 8.1. before 8.1.31, 8.2. High 8.2 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-11236 In PHP versions 8.1. before 8.1.31, 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-11234 In PHP versions 8.1. before 8.1.31, 8.2. High 7.2 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-24 No
CVE-2024-8932 In PHP versions 8.1. before 8.1.31, 8.2. Critical 9.8 ≥ 8.1.0 < 8.1.31
≥ 8.2.0 < 8.2.26
≥ 8.3.0 < 8.3.14 2024-11-22 No
CVE-2024-5585 In PHP versions 8.1. before 8.1.29, 8.2. High 8.8 ≥ 8.1.0 < 8.1.29
≥ 8.2.0 < 8.2.20
≥ 8.3.0 < 8.3.8 2024-06-09 No
CVE-2024-1874 In PHP versions 8.1. before 8.1.28, 8.2. Critical 9.4 ≥ 8.1.0 < 8.1.28
≥ 8.2.0 < 8.2.18
≥ 8.3.0 < 8.3.5 2024-04-29 No

PHP 8.0 · 1

IDAdvisorySeverityAffected versionsPublishedFix
CVE-2022-31631 In PHP versions 8.0. before 8.0.27, 8.1. Critical 9.1 ≥ 8.0.0 < 8.0.27
≥ 8.1.0 < 8.1.15
≥ 8.2.0 < 8.2.2 2025-02-12 No

Stop checking the list by hand

PrestaShield knows the modules and version of your shop, checks them against this database and alerts you as soon as an advisory that affects you is published. No FTP access, no customer data.
Monitor my shop automatically