craftcms Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by craftcms
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Mass-assignment Flaw in Craft CMS Affecting Multiple Versions
CVE-2026-50281CraftcmsCms7.1HIGHAuthorization Bypass in Craft CMS Affects Entry Permissions
CVE-2026-50279CraftcmsCms7.6HIGHUnsandboxed Twig Code Execution in Craft CMS
CVE-2026-55794CraftcmsCms8.7HIGHCross-Site Scripting Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-55790CraftcmsCms7.4HIGHPrivilege Escalation Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-50284CraftcmsCms7.1HIGHAuthenticated Path Traversal Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-56394CraftcmsCms7.1HIGHRemote Code Execution Vulnerability in Craft CMS by Craft
CVE-2026-56382CraftcmsCms8.6HIGHInput Handling Flaw in Craft CMS Leads to Potential Command Injection
CVE-2026-44011CraftcmsCms8.6HIGHInformation Disclosure in Craft CMS by Craft
CVE-2026-44012CraftcmsCms7.1HIGHGraphQL Address Element Vulnerability in Craft CMS
CVE-2026-44010CraftcmsCms7.1HIGHSQL Injection Vulnerability in Craft Commerce by Craft CMS
CVE-2026-32272CraftcmsCommerce8.7HIGHSQL Injection Vulnerability in Craft Commerce E-commerce Platform by Craft CMS
CVE-2026-32271CraftcmsCommerce7.7HIGHRemote Code Execution Vulnerability in Craft CMS by Craft
CVE-2026-33157CraftcmsCms8.6HIGHExposure of Sensitive Data in Azure Blob Storage Integration for Craft CMS
CVE-2026-32268CraftcmsAzure-blob8.7HIGHPrivilege Escalation Vulnerability in Craft CMS by Pixel & Tonic
CVE-2026-32267CraftcmsCms7.7HIGHRemote Code Execution Vulnerability in Craft CMS Administrators
CVE-2026-32264CraftcmsCms8.6HIGHYii2 Behavior Injection in Craft CMS by Pixel & Tonic
CVE-2026-32263CraftcmsCms8.6HIGHRemote Code Execution in Craft CMS Plugin by Craft
CVE-2026-32261CraftcmsWebhooks8.5HIGHSQL Injection Vulnerability in Craft CMS Affects User Data Access
CVE-2026-31858CraftcmsCms8.7HIGHRemote Code Execution in Craft CMS from Craft
CVE-2026-31857CraftcmsCms8.1HIGHStored XSS Vulnerability in Craft Commerce by Craft CMS
CVE-2026-29175CraftcmsCommerce8.6HIGHSQL Injection Vulnerability in Craft Commerce by Craft CMS
CVE-2026-29174CraftcmsCommerce8.7HIGHSQL Injection Vulnerability in Craft Commerce by Craft CMS
CVE-2026-29172CraftcmsCommerce8.7HIGHRemote Code Execution Vulnerability in Craft CMS by Craft
CVE-2026-28784CraftcmsCms8.6HIGHRemote Code Execution and File Access Vulnerabilities in Craft CMS
CVE-2026-28783CraftcmsCms9.4CRITICAL