civicrm Latest Vulnerabilities

Latest vulnerabilities published by civicrm

JSON RSS CSV 🔔 Create Alert Trigger

11 August 2026

SQL Injection Vulnerability in CiviCRM by CiviCRM
CVE-2026-72558
CivicrmCivicrm8.8HIGH

2 December 2025

Stored Cross Site Scripting Vulnerability in CiviCRM by CiviCRM LLC
CVE-2025-65187
CiviCRM LLCCiviCRM6.1MEDIUM

23 May 2023

Stored Cross Site Scripting Vulnerability in CiviCRM by CiviCRM
CVE-2023-25440
CivicrmCivicrm5.4MEDIUM

17 June 2021

File Upload Vulnerability in CiviCRM by CiviCRM
CVE-2020-36388
CivicrmCivicrm8.8HIGH
CSRF Vulnerability in CiviCRM Affects CKEditor Configuration
CVE-2020-36389
CivicrmCivicrm4.3MEDIUM

15 June 2015

CSRF Vulnerability in CiviCRM Private Report Module for Drupal
CVE-2015-4391
CivicrmCivicrm Private Report

29 January 2014

27 November 2013

SQL Injection Vulnerability in CiviCRM Affecting Remote Access
CVE-2013-5957
CivicrmCivicrm

6 November 2012

CiviCRM Vulnerability in SSL Server Verification
CVE-2011-5239
CivicrmCivicrm