Phpipam

This hub aggregates every CVE we track for Phpipam, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Phpipam.

• CVE-2026-67602phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache9.1Aug 24, 2026
• CVE-2026-75105phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter7.5Aug 17, 2026
• CVE-2026-12194PHPIPAM Authenticated LFIJul 4, 2026
• CVE-2025-61078Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the /app/admin/instru...6.1Dec 9, 2025
• CVE-2025-60912phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The generate-mysql.php function, located in the /app/admin/import-export/ endpoint, a...3.3Dec 8, 2025
• CVE-2024-55093phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts.5.4Mar 31, 2025
• CVE-2024-10721Store XSS in phpipam/phpipam5.4Mar 20, 2025
• CVE-2024-10727Cross-Site Scripting (XSS) in phpipam/phpipam6.1Mar 20, 2025
• CVE-2024-10720Stored Cross-site Scripting (XSS) in phpipam/phpipam6.1Mar 20, 2025
• CVE-2024-10722Stored Cross-site Scripting (XSS) in phpipam/phpipam5.4Mar 20, 2025
• CVE-2024-10719Stored Cross-site Scripting (XSS) in phpipam/phpipam5.4Mar 20, 2025
• CVE-2024-10718Cookie without Secure attribute in phpipam/phpipam7.5Mar 20, 2025
• CVE-2024-10724Stored XSS in IPV6 Section in phpipam/phpipam5.4Mar 20, 2025
• CVE-2024-10723Stored XSS in phpipam/phpipam5.4Mar 20, 2025
• CVE-2024-10725Stored Cross-site Scripting (XSS) in phpipam/phpipam5.4Mar 20, 2025