phpList

Products

ProductCVEsExploitedLatest
phplist32–Aug 13, 2026
phpList1–Sep 16, 2026

Exploited and recent CVEs

  • CVE-2026-92806 High 8.1 phpList before 3.6.17 Cross-Site Request Forgery via massremove.php 0.3%
  • CVE-2026-73482 High 8.1 phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php 0.3%
  • CVE-2026-73481 Medium 5.4 phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules 0.2%