PHP

Category - Programming Languages

PHP is a popular general-purpose scripting language that is especially suited to web development.


We have discovered  30,565,992 live websites   that are using PHP.

Download Lead List
Download a sample report


Technology usage statistics

Websites using PHP30,565,992 websites
Most popular in the country United States
Market position in Programming Languages#1
Market penetration in Programming Languages88.92%
Most popular version7.4.33

Technology adoption

Recent changes in PHP usage. (See PHP Usage Changes report)
Websites that added PHP+382,657
Websites that dropped PHP-448,818
Websites that changed version of PHP1,644,409

Security vulnerabilites


PublishedCVEWebsites
Aug, 2023Buffer overflow and overread in phar_dir_read()1,089,606
Aug, 2023Security issue with external entity loading in XML without enabling it1,089,606
Jul, 2023Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP1,061,221
Feb, 2023DoS vulnerability when parsing multipart request body450,539
Feb, 2023Array overrun in common path resolve code450,539
Feb, 2023password_verify() always returns true for some invalid hashes450,539
Nov, 2022OOB read due to insufficient input validation in imageloadfont()1,076,326
Sep, 2022$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities1,052,163
Sep, 2022phar wrapper can occur dos when using quine gzip file1,052,163
Jul, 2022Heap buffer overflow in finfo_buffer63,448
Jun, 2022mysqlnd/pdo password buffer overflow945,201
Jun, 2022Freeing unallocated memory in php_pgsql_free_params()945,201
Feb, 2022UAF due to php_filter_float() failing854,793
Nov, 2021Special characters break path parsing in XML functions1,044,385
Oct, 2021PHP-FPM memory access in root process leading to privilege escalation1,010,879
Sep, 2021ZipArchive::extractTo may extract outside of destination dir977,161
Jun, 2021Incorrect URL validation in FILTER_VALIDATE_URL922,016
Jun, 2021Multiple vulnerabilities in Firebird client extension922,016
Feb, 2021Null Dereference in SoapClient830,634
Jan, 2021FILTER_VALIDATE_URL accepts URLs with invalid userinfo814,697
Sep, 2020PHP parses encoded cookie names so malicious `__Host-` cookies can be sent745,951
Sep, 2020Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV745,951
Aug, 2020Use of freed hash key in the phar_parse_zipfile function684,803
May, 2020Temporary files are not cleaned after OOM when parsing HTTP request data638,410
Mar, 2020mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full413,355
Feb, 2020Use-of-uninitialized-value in exif615,085
Feb, 2020Files added to tar with Phar::buildFromIterator have all-access permissions597,107
Feb, 2020Null Pointer Dereference in PHP Session Upload Progress597,107
Feb, 2020heap-buffer-overflow in phar_extract_file398,049
Jan, 2020global buffer-overflow in mbfl_filt_conv_big5_wchar585,899
Jan, 2020OOB read in php_strip_tags_ex585,899
Dec, 2019Use-after-free in exif parsing under memory sanitizer571,903
Dec, 2019mail() may release string with refcount==1 twice378,377
Dec, 2019Heap-buffer-overflow READ in exif571,903
Dec, 2019Buffer underflow in bc_shift_addsub571,903
Dec, 2019DirectoryIterator class silently truncates after a null byte571,903
Dec, 2019link() silently truncates after a null byte on Windows571,903
Oct, 2019Underflow in PHP-FPM can lead to RCE309,685
Apr, 2019Heap over-read in PHP EXIF extension248,615
Apr, 2019Heap over-read in PHP EXIF extension239,735
Apr, 2019Heap over-read in PHP EXIF extension239,735

PHP usage distribution by website rank

The correlation between utilization of PHP technology and the relative popularity of websites

Geographical Distribution

Technology usage distribution by websites across the globe.



Websites utilizing PHP

Top websites that use PHP
DomainCountryRankContacts
wordpress.org United States4
m.facebook.com United States16
secure.gravatar.com United States35
en.wikipedia.org United States53
vimeo.com United States67
wordpress.com United States68
See full domain list

Alternative Technologies


CFML: Total 1,221,174 domains found using CFML
Java: Total 638,403 domains found using Java
Node.js: Total 579,111 domains found using Node.js
Ruby: Total 556,767 domains found using Ruby
Adobe Flash: Total 436,774 domains found using Adobe Flash
Python: Total 382,235 domains found using Python
Erlang: Total 257,010 domains found using Erlang
TypeScript: Total 157,687 domains found using TypeScript
Perl: Total 75,937 domains found using Perl
CSharp: Total 75,058 domains found using CSharp





Major Versions

  • 3.xx (13 subversions, 169 domains)
  • 4.xx (39 subversions, 101,620 domains)
  • 5.xx (192 subversions, 3,116,956 domains)
  • 7.xx (175 subversions, 5,691,154 domains)
  • 8.xx (88 subversions, 3,187,200 domains)