PHP

Category - Programming Languages

PHP is a popular general-purpose scripting language that is especially suited to web development.



We have discovered  31,567,572 live websites   that are using PHP.

Download Lead List
Download a sample report


Technology usage statistics

Websites using PHP31,567,572 websites
Most popular in the country United States
Market position in Programming Languages#1
Market penetration in Programming Languages88.99%
Most popular version7.4.33

Technology adoption

Recent changes in PHP usage. (See PHP Usage Changes report)
Websites that added PHP+513,415
Websites that dropped PHP-656,241
Websites that changed version of PHP2,515,920

Security vulnerabilites


PublishedCVEWebsites
Aug, 2023Buffer overflow and overread in phar_dir_read()1,233,912
Aug, 2023Security issue with external entity loading in XML without enabling it1,233,912
Jul, 2023Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP1,190,237
Feb, 2023DoS vulnerability when parsing multipart request body483,030
Feb, 2023Array overrun in common path resolve code483,030
Feb, 2023password_verify() always returns true for some invalid hashes483,030
Nov, 2022OOB read due to insufficient input validation in imageloadfont()1,131,464
Sep, 2022$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities1,104,856
Sep, 2022phar wrapper can occur dos when using quine gzip file1,104,856
Jul, 2022Heap buffer overflow in finfo_buffer65,350
Jun, 2022mysqlnd/pdo password buffer overflow991,286
Jun, 2022Freeing unallocated memory in php_pgsql_free_params()991,286
Feb, 2022UAF due to php_filter_float() failing895,112
Nov, 2021Special characters break path parsing in XML functions1,103,495
Oct, 2021PHP-FPM memory access in root process leading to privilege escalation1,068,147
Sep, 2021ZipArchive::extractTo may extract outside of destination dir1,031,701
Jun, 2021Incorrect URL validation in FILTER_VALIDATE_URL971,576
Jun, 2021Multiple vulnerabilities in Firebird client extension971,576
Feb, 2021Null Dereference in SoapClient874,730
Jan, 2021FILTER_VALIDATE_URL accepts URLs with invalid userinfo857,270
Sep, 2020PHP parses encoded cookie names so malicious `__Host-` cookies can be sent779,237
Sep, 2020Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV779,237
Aug, 2020Use of freed hash key in the phar_parse_zipfile function715,787
May, 2020Temporary files are not cleaned after OOM when parsing HTTP request data665,017
Mar, 2020mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full431,663
Feb, 2020Use-of-uninitialized-value in exif640,449
Feb, 2020Files added to tar with Phar::buildFromIterator have all-access permissions622,129
Feb, 2020Null Pointer Dereference in PHP Session Upload Progress622,129
Feb, 2020heap-buffer-overflow in phar_extract_file416,392
Jan, 2020global buffer-overflow in mbfl_filt_conv_big5_wchar610,251
Jan, 2020OOB read in php_strip_tags_ex610,251
Dec, 2019Use-after-free in exif parsing under memory sanitizer595,517
Dec, 2019mail() may release string with refcount==1 twice395,737
Dec, 2019Heap-buffer-overflow READ in exif595,517
Dec, 2019Buffer underflow in bc_shift_addsub595,517
Dec, 2019DirectoryIterator class silently truncates after a null byte595,517
Dec, 2019link() silently truncates after a null byte on Windows595,517
Oct, 2019Underflow in PHP-FPM can lead to RCE326,127
Apr, 2019Heap over-read in PHP EXIF extension261,312
Apr, 2019Heap over-read in PHP EXIF extension251,854
Apr, 2019Heap over-read in PHP EXIF extension251,854

PHP usage distribution by website rank

The correlation between utilization of PHP technology and the relative popularity of websites

Geographical Distribution

Technology usage distribution by websites across the globe.



Websites utilizing PHP

Top websites that use PHP
DomainCountryRankContacts
wordpress.org United States4
m.facebook.com United States16
secure.gravatar.com United States35
en.wikipedia.org United States53
vimeo.com United States67
wordpress.com United States68
See full domain list

Alternative Technologies


CFML: Total 1,258,853 domains found using CFML
Java: Total 661,544 domains found using Java
Node.js: Total 578,227 domains found using Node.js
Ruby: Total 558,059 domains found using Ruby
Adobe Flash: Total 456,271 domains found using Adobe Flash
Python: Total 391,868 domains found using Python
Erlang: Total 282,501 domains found using Erlang
TypeScript: Total 160,148 domains found using TypeScript
Perl: Total 77,555 domains found using Perl
CSharp: Total 72,024 domains found using CSharp





Major Versions

  • 3.xx (12 subversions, 172 domains)
  • 4.xx (38 subversions, 102,544 domains)
  • 5.xx (193 subversions, 3,269,482 domains)
  • 7.xx (176 subversions, 5,950,292 domains)
  • 8.xx (86 subversions, 3,206,664 domains)