32 CVEs affecting PHP Arena products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: Pafiledb, Pafaq, Pabugs, Panews, Pabox.