flarum Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by flarum

JSON RSS CSV 🔔 Create Alert Trigger

11 December 2025

Server-Side Template Injection in FoF Pretty Mail by Friends of Flarum
CVE-2024-58303
FlarumFriendsofflarum Pretty...👾🟡8.6HIGH

16 August 2023

Server-Side Request Forgery via Avatar upload in flarum
CVE-2023-40033
FlarumFramework7.1HIGH

11 January 2023

Post mentions can be used to read any post on the forum without access control
CVE-2023-22487
FlarumFramework7.7HIGH

19 November 2022

Cross site scripting vulnerability with discussion titles in flarum
CVE-2022-41938
FlarumFramework9CRITICAL

7 June 2021

XSS vulnerability with translator
CVE-2021-32671
FlarumCore10CRITICAL

7 July 2019

Cross-Site Request Forgery Vulnerability in Flarum by Flarum
CVE-2019-13183
FlarumFlarum8.8HIGH

25 April 2019

Email Token Invalidation Flaw in Flarum by Flarum
CVE-2019-11514
FlarumFlarum7.5HIGH