Craft CMS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
153 matching records
- LowAuthenticated admin RCE via Content Block field-layout JSON-string cleanseOpen the advisoryOct 5, 2026
- HighAuthenticated RCE via render-components Entry Type overridesOpen the advisoryOct 5, 2026
- MediumVerification code survives verify-email use and remains valid for set-passwordOpen the advisoryOct 5, 2026
- MediumGraphQL site-scope enforcement missing on entry create, "deleteEntry" without "siteId", and Category/Tag/Asset delete mutationsOpen the advisoryOct 5, 2026
- High8.7Formie is a Craft CMS plugin for creating forms.Check if you run itEPSS 0.31%May 29, 2026
- Critical9.8Formie is a Craft CMS plugin for creating forms.Check if you run itEPSS 0.47%May 29, 2026
- High7.1Craft CMS is a content management system (CMS).Check if you run itEPSS 0.34%May 12, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.62%May 12, 2026
- High7.1Craft CMS is a content management system (CMS).Check if you run itEPSS 0.41%May 12, 2026
- Medium5.5Craft CMS is a content management system (CMS).Check if you run itEPSS 0.33%Apr 22, 2026
- Medium5.5Craft CMS is a content management system (CMS).Check if you run itEPSS 0.27%Apr 22, 2026
- Medium5.3Craft CMS is a content management system (CMS).Check if you run itEPSS 0.25%Apr 22, 2026
- High8.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.30%Apr 13, 2026
- High7.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.48%Apr 13, 2026
- Low1.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.29%Apr 13, 2026
- Medium4.9Craft CMS is a content management system (CMS).Check if you run itEPSS 0.29%Mar 24, 2026
- Low1.3Craft CMS is a content management system (CMS).Check if you run itEPSS 0.22%Mar 24, 2026
- Low2.7Craft CMS is a content management system (CMS).Check if you run itEPSS 0.36%Mar 24, 2026
- Medium6.9Craft CMS is a content management system (CMS).Check if you run itEPSS 0.38%Mar 24, 2026
- Medium4.9Craft CMS is a content management system (CMS).Check if you run itEPSS 0.36%Mar 24, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 1.11%Mar 24, 2026
- Medium5.5The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS.Check if you run itEPSS 0.26%Mar 23, 2026
- Medium5.3Craft CMS is a content management system (CMS).Check if you run itEPSS 0.25%Mar 20, 2026
- High8.7The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS.Check if you run itEPSS 0.37%Mar 18, 2026
- Low2.4The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS.Check if you run itEPSS 0.36%Mar 18, 2026