payloadcms Latest Vulnerabilities

Latest vulnerabilities published by payloadcms

JSON RSS CSV 🔔 Create Alert Trigger

26 June 2026

Improper Authorization in PayloadCMS by FluidAttacks
CVE-2026-11779
PayloadcmsPayloadcms5.3MEDIUM

1 April 2026

File Sanitation Flaw in Payload CMS Affecting Azure, GCS, R2, and S3 Storage
CVE-2026-34750
PayloadcmsPayload6.5MEDIUM
CSRF Vulnerability in Payload CMS Prior to Version 3.79.1
CVE-2026-34749
PayloadcmsPayload5.4MEDIUM
XSS Vulnerability in Payload CMS Admin Panel Affects Users
CVE-2026-34748
PayloadcmsPayload8.7HIGH
SQL Injection Vulnerability in Payload CMS Affects Versions Prior to 3.79.1
CVE-2026-34747
PayloadcmsPayload8.5HIGH
Server-Side Request Forgery in Payload CMS Affects Upload Functionality
CVE-2026-34746
PayloadcmsPayload7.7HIGH
Vulnerability in Payload CMS Affects Password Recovery Flow
CVE-2026-34751
PayloadcmsPayload9.1CRITICAL

24 February 2026

Server-Side Request Forgery Vulnerability in Payload CMS
CVE-2026-27567
PayloadcmsPayload6.5MEDIUM

6 February 2026

26 April 2023

Payload's hidden fields can be leaked on readable collections
CVE-2023-30843
PayloadcmsPayload7.4HIGH

12 April 2022

Arbitrary File Upload Vulnerability in PayloadCMS by Payload
CVE-2022-27952
PayloadcmsPayload9.8CRITICAL