Craft CMS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
153 matching records
- Medium5.7Craft is a content management system (CMS).Check if you run itEPSS 0.46%Feb 24, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.20%Feb 24, 2026
- High7.0Craft is a content management system (CMS).Check if you run itEPSS 0.49%Feb 24, 2026
- Medium5.9Craft is a content management system (CMS).Check if you run itEPSS 0.25%Feb 24, 2026
- Medium5.1Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool.Check if you run itEPSS 0.30%Feb 12, 2026
- High8.6Craft is a platform for creating digital experiences.Check if you run itEPSS 1.12%Feb 9, 2026
- High8.6Craft is a platform for creating digital experiences.Check if you run itEPSS 0.48%Feb 9, 2026
- Medium4.8Craft is a platform for creating digital experiences.Check if you run itEPSS 0.42%Feb 9, 2026
- High8.7Craft is a platform for creating digital experiences.Check if you run itEPSS 0.56%Feb 9, 2026
- Medium6.9Craft is a platform for creating digital experiences.Check if you run itEPSS 0.40%Feb 9, 2026
- Medium6.9Craft is a platform for creating digital experiences.Check if you run itEPSS 0.40%Feb 9, 2026
- Medium5.3Craft CMS is a content management system.Check if you run itEPSS 0.47%Feb 9, 2026
- Low1.9Craft is a platform for creating digital experiences.Check if you run itEPSS 0.36%Feb 9, 2026
- Critical9.3CraftCMS 3 vCard Plugin 1.0.0 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary PHP code through a crafted payload.Check if you run itEPSS 0.75%Feb 3, 2026
- High7.0Craft is a platform for creating digital experiences.Check if you run itEPSS 0.56%Jan 5, 2026
- High8.6Craft is a platform for creating digital experiences.Check if you run itEPSS 0.97%Jan 5, 2026
- Medium5.2Craft is a platform for creating digital experiences.Check if you run itEPSS 0.94%Jan 5, 2026
- Medium5.0Craft is a platform for creating digital experiences.Check if you run itEPSS 0.47%Jan 5, 2026
- Medium4.9Craft is a platform for creating digital experiences.Check if you run itEPSS 0.28%Jan 5, 2026
- Critical9.8Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that hCheck if you run itEPSS 0.61%Aug 27, 2025
- Medium6.1Craft is a platform for creating digital experiences.Check if you run itEPSS 0.94%Aug 25, 2025
- Medium5.2Craft is a platform for creating digital experiences.Check if you run itEPSS 0.53%Aug 9, 2025
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- High7.3Craft is a content management system.Check if you run itEPSS 1.52%May 5, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 99.79%Apr 18, 2025