Advisories · Technology

phplist3.

Every CVE that names phplist3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73482 CVE record

CVSS 7.2 High

phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php
- phplist3
- Cross-site request forgery (CSRF)
Not analysed yet 13 Aug 2026
CVE-2026-73481 CVE record

CVSS 5.3 Medium

phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules
- phplist3
- Cross-site request forgery (CSRF)
Not analysed yet 13 Aug 2026