Here’s a list of common PHP vulnerabilities: Weak input validation, Dynamic typing and loose data handling, Cross-Site Request Forgery (CSRF), SQL Injection, Session Hijacking, Invalidated File Uploads, Remote Code Execution (RCE), Unvalidated Redirects and Forwards.