thinkphp security advisories
2 threat alerts tracking vulnerabilities and security advisories that affect thinkphp products.
Vulnios monitors thinkphp CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent thinkphp security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2025-63888 — thinkphp — thinkphp
The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.
criticalCVE-2025-63888Critical Vulnerability: CVE-2018-25270 — thinkphp — thinkphp
ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can cr
criticalCVE-2018-25270
Track thinkphp exposure across your environment
Vulnios automatically cross-references your asset inventory against new thinkphp CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan