MA
Product
Mautic
35
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 6High 7Medium 21Low 1
Watch
Add Mautic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3105 | 8.8 | Feb 24 | SQL Injection in Contact Activity API Sorting Affected: 2.10.0 before 4.4.19; 5.0.0 before 5.2.10; 6.0.0 before 6.0.8; 7.0.0 before 7.0.1 |
| CVE-2017-8874 | 8.8 | May 10 | Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email… Affected: 1.4.1 |
| CVE-2021-27916 | 8.1 | Sep 17 | Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion Affected: 3.3.0 before 4.4.12; 5.0.0 before 5.0.4 |
| CVE-2017-1000489 | 8.1 | Jan 3 | Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address Affected: 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.2.0; 2.2.1; +16 more |
| CVE-2024-47053 | 7.7 | Feb 26 | This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation Affected: 1.0.1 before 5.2.3 |
| CVE-2022-25770 | 7.5 | Sep 18 | Mautic allows you to update the application via an upgrade script Affected: 1.0.1 before 4.4.13; 5.0.0 before 5.1.1; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +3 more |
| CVE-2022-25775 | 7.2 | Sep 18 | Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle Affected: 2.14.1 before 4.4.12; 5.0.0 before 5.0.4 |
Showing 7