Security advisories

medium2023-01-11

XML-RPC for PHP allows access to local files via malicious argument to the Client::send method

GHSA-m95x-m25c-w9mp

medium2023-01-11

XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument

GHSA-7vcx-v65q-9wpg

medium2023-01-11

XML-RPC for PHP's debugger vulnerable to possible XSS attack

GHSA-pxqj-xrv5-qvjf

medium2022-12-02

phpxmlrpc vulnerable to argument injection

GHSA-q7qq-9gx2-ggxv

high2022-11-28

code injection in phpxmlrpc/phpxmlrpc

GHSA-3fgr-xjr6-xqm8