payloadcms Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by payloadcms

JSON RSS CSV 🔔 Create Alert Trigger

1 April 2026

XSS Vulnerability in Payload CMS Admin Panel Affects Users
CVE-2026-34748
PayloadcmsPayload8.7HIGH
SQL Injection Vulnerability in Payload CMS Affects Versions Prior to 3.79.1
CVE-2026-34747
PayloadcmsPayload8.5HIGH
Server-Side Request Forgery in Payload CMS Affects Upload Functionality
CVE-2026-34746
PayloadcmsPayload7.7HIGH
Vulnerability in Payload CMS Affects Password Recovery Flow
CVE-2026-34751
PayloadcmsPayload9.1CRITICAL

6 February 2026

Blind SQL Injection Vulnerability in Payload CMS by Payload
CVE-2026-25544
PayloadcmsPayload9.8CRITICAL

26 April 2023

Payload's hidden fields can be leaked on readable collections
CVE-2023-30843
PayloadcmsPayload7.4HIGH

12 April 2022

Arbitrary File Upload Vulnerability in PayloadCMS by Payload
CVE-2022-27952
PayloadcmsPayload9.8CRITICAL