IndexedVerified
PHP Security
PHP SAST rules aggregated across verified providers.
Fetch pack
greprules pack fetch php-security --engine opengrepcurl https://api.greprules.io/api/packs/php-security.tar.gz -o php-security.tar.gz- Owner
- Provally
- Total rules
- 554
- Downloads
- 0
- Last updated
- 2026-09-02
- Languages
PHP
Included rules
CVE-2026-84190: Php Config Command Injection
cve-2026-84190-php-config-command-injectionCVE-2026-84187: Avideo Unauthorized Schedule Status Updatecve-2026-84187-avideo-unauthorized-schedule-status-updateCVE-2026-83743: Laravel Unauthorized Route Model Updatecve-2026-83743-laravel-unauthorized-route-model-updateCVE-2026-83595: Avideo Csrf Bypass Same Domain Checkcve-2026-83595-avideo-csrf-bypass-same-domain-checkCVE-2026-82669: Git Log Xml Format Doscve-2026-82669-git-log-xml-format-dosCVE-2026-82647: Avideo Csrf Bypass Sendemailcve-2026-82647-avideo-csrf-bypass-sendemailCVE-2026-82645: Avideo Insecure Decrypt String Intvalcve-2026-82645-avideo-insecure-decrypt-string-intvalCVE-2026-82451: Php Unvalidated Referer Hostcve-2026-82451-php-unvalidated-referer-hostCVE-2026-82450: Php Image Filename Unvalidated Extensioncve-2026-82450-php-image-filename-unvalidated-extensionCVE-2026-82396: Php Symfony Unsafe Inline File Responsecve-2026-82396-php-symfony-unsafe-inline-file-responseCVE-2026-82395: Sulu Media Move Missing Permission Checkcve-2026-82395-sulu-media-move-missing-permission-checkCVE-2026-82394: Sulu Preview Link Missing Permission Checkcve-2026-82394-sulu-preview-link-missing-permission-checkCVE-2026-81892: Symfony Dynamic Route Controller Missing Access Checkcve-2026-81892-symfony-dynamic-route-controller-missing-access-checkCVE-2026-81890: Elfinder Missing Netmount Csrf Protectioncve-2026-81890-elfinder-missing-netmount-csrf-protectionCVE-2026-81759: Wordpress Insufficient Capability For Update Optioncve-2026-81759-wordpress-insufficient-capability-for-update-optionCVE-2026-81758: Wordpress Missing Auth Ajax Api Requestcve-2026-81758-wordpress-missing-auth-ajax-api-requestCVE-2026-81757: Php Wordpress Missing Post Edit Permission Checkcve-2026-81757-php-wordpress-missing-post-edit-permission-checkCVE-2026-81525: Php Mongodb Unvalidated Namespace Injectioncve-2026-81525-php-mongodb-unvalidated-namespace-injectionCVE-2026-81274: Wordpress Ajax Missing Capability Checkcve-2026-81274-wordpress-ajax-missing-capability-checkCVE-2026-81271: Wordpress Rest Csrf Invalid Nonce Bypasscve-2026-81271-wordpress-rest-csrf-invalid-nonce-bypassCVE-2026-78365: Laravel Mass Assignment Request Allcve-2026-78365-laravel-mass-assignment-request-allCVE-2026-78337: Laravel Unvalidated File Uploadcve-2026-78337-laravel-unvalidated-file-uploadCVE-2026-78333: Wordpress Unescaped Array Echocve-2026-78333-wordpress-unescaped-array-echoCVE-2026-78288: Wordpress Wpdb Sql Injectioncve-2026-78288-wordpress-wpdb-sql-injection24 of 554 loaded