Login Request a demo
CK
Product
CKFinder
by CKSource · last CVE Dec 5, 2025
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CKFinder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-15862
7.5
2%
Sep 26
An issue was discovered in CKFinder through 2.6.2.1
Affected: before 2.6.3; before 2.6.3; before 2.6.3; before 2.6.3
CVE-2016-20023
6.5
0%
Dec 5
In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided
Affected: 2 before 2.5.0.1
CVE-2025-63830
6.1
0%
Nov 14
CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function
Affected: 1.4.3
CVE-2019-15891
5.3
1%
Sep 26
An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0
Affected: through 2.6.2.1; 3.0 through 3.5.0
Showing 4