cakephp Latest Vulnerabilities

Latest vulnerabilities published by cakephp

JSON RSS CSV 🔔 Create Alert Trigger

24 August 2026

Authentication Bypass in CakePHP Authentication Plugin by CakePHP
CVE-2026-77337
CakePHPAuthentication9.1CRITICAL
Header Injection Vulnerability in CakePHP Framework
CVE-2026-77634
CakePHPCakePHP8.2HIGH
SQL Injection Vulnerability in CakePHP Framework Affecting PostgreSQL Driver
CVE-2026-77635
CakePHPCakePHP9.2CRITICAL

9 July 2026

Backslash Bypass Vulnerability in CakePHP Authentication Plugin
CVE-2026-55590
CakePHPAuthentication5.1MEDIUM

17 June 2026

PHP Framework Vulnerability in CakePHP Affecting Multiple Versions
CVE-2026-48820
CakePHPCakePHP6.3MEDIUM

16 January 2026

Cross-Site Scripting in CakePHP's PaginatorHelper Affects Users
CVE-2026-23643
CakePHPCakePHP5.4MEDIUM

17 January 2023

Database Query::offset() and limit() vulnerable to SQL injection in cakephp
CVE-2023-22727
CakePHPCakePHP9.8CRITICAL

23 January 2017

IP Spoofing Vulnerability in CakePHP by Cake Software Foundation
CVE-2016-4793
CakePHPCakePHP👾🟡7.5HIGH

26 January 2016

CSRF Protection Bypass in CakePHP Versions 2.x and 3.x
CVE-2015-8379
CakePHPCakePHP8.8HIGH