Sploitus

29 exploited vulnerabilities in Phpspreadsheet

Vulnerabilities with publicly known exploits

Vendors
Unknown, Phpoffice, Packagist, Git
With known exploits
29
Affected Phpoffice Phpspreadsheet versions
< 1.29.8, 2.1.7, 2.3.6, 3.8.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2026-34084
CVSS 10.0 CRITICAL 2026-04-29FIX AVAILABLE
CVE-2026-45034 2 exploits
CVSS 9.2 CRITICAL 2026-06-08FIX AVAILABLE
📄 PHPSpreadsheet 5.8.0 Remote Code ExecutionExploit for CVE-2026-45034
CVE-2024-45048
CVSS 8.8 HIGH 2024-08-28FIX AVAILABLE
CVE-2025-54370
CVSS 8.7 HIGH 2025-01-15FIX AVAILABLE
CVE-2024-45293
CVSS 8.7 HIGH 2024-10-07FIX AVAILABLE
CVE-2024-45291
CVSS 8.3 HIGH 2024-10-07FIX AVAILABLE
CVE-2024-45290
CVSS 8.3 HIGH 2024-10-07FIX AVAILABLE
CVE-2024-56409
CVSS 8.3 HIGH 2024-12-23FIX AVAILABLE
CVE-2024-56408
CVSS 8.3 HIGH 2024-12-23FIX AVAILABLE
CVE-2024-56365
CVSS 8.3 HIGH 2024-12-23FIX AVAILABLE
CVE-2024-56366
CVSS 8.3 HIGH 2024-12-23FIX AVAILABLE
CVE-2026-59933
CVSS 7.8 HIGH 2026-07-12
CVE-2026-59932
CVSS 7.8 HIGH 2026-07-12
CVE-2026-59931
CVSS 7.7 HIGH 2026-07-12FIX AVAILABLE
CVE-2026-40902
CVSS 7.5 HIGH 2026-04-29FIX AVAILABLE
CVE-2026-40863
CVSS 7.5 HIGH 2026-04-29FIX AVAILABLE
CVE-2024-48917
CVSS 7.5 HIGH 2024-11-18FIX AVAILABLE
CVE-2024-47873
CVSS 7.5 HIGH 2024-11-18FIX AVAILABLE
CVE-2024-45060
CVSS 7.1 HIGH 2024-10-07FIX AVAILABLE
CVE-2020-7776
CVSS 7.1 HIGH 2020-12-09FIX AVAILABLE
CVE-2025-22131 3 exploits
CVSS 6.1 MEDIUM 2024-12-23
Exploit for Cross-site Scripting in Phpoffice PhpspreadsheetExploit for Cross-site Scripting in Phpoffice Phpspreadsheet
CVE-2025-23210
CVSS 5.5 MEDIUM 2025-01-15FIX AVAILABLE
CVE-2026-35453
CVSS 5.4 MEDIUM 2026-04-28FIX AVAILABLE
CVE-2026-40296
CVSS 5.4 MEDIUM 2026-04-28
CVE-2024-45292
CVSS 5.4 MEDIUM 2024-10-07FIX AVAILABLE
CVE-2024-45046
CVSS 5.4 MEDIUM 2024-08-28FIX AVAILABLE
CVE-2024-56412
CVSS 5.4 MEDIUM 2024-12-23FIX AVAILABLE
CVE-2024-56411
CVSS 5.4 MEDIUM 2024-12-23FIX AVAILABLE
CVE-2024-56410
CVSS 5.4 MEDIUM 2024-12-23FIX AVAILABLE