PatchTheCVEeasyphp vulnerabilities
Recent CVEs affecting easyphp products. 3 tracked.
easyphp has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-12-18. Highest priority: CVE-2023-53941 (score 71/100).
- CVE-2024-11215 MEDIUM 6.5 DOWNGRADE Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyP
- CVE-2023-53944 MEDIUM 6.5 DOWNGRADE EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to
- CVE-2023-53941 CRITICAL 9.8 DOWNGRADE EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to
FAQ
How do I fix easyphp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easyphp being exploited right now?
None of the tracked easyphp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easyphp CVE should I patch first?
CVE-2023-53941 currently ranks highest (71/100): EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to.