Login Request a demo
CO
Product
Codeigniter
by Codeigniter · last CVE Jul 28, 2025
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 22High 8Medium 6Low 0
Severity
All severities41Critical22High8Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Codeigniter to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-35943
8.8
1%
Aug 12
Shield is an authentication and authorization framework for CodeIgniter 4
Affected: before 4.2.3
CVE-2022-24712
8.8
1%
Feb 28
CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework
Affected: 4.0.0 before 4.1.9
CVE-2020-10793
8.8
2%
Mar 23
CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page
Affected: through 4.0.0
CVE-2024-41344
7.5
0%
Oct 15
A Cross-Site Request Forgery (CSRF) in Codeigniter 3.1.13 allows attackers to arbitrarily change the Administrator password and escalate privileges
Affected: 3.1.13
CVE-2024-29904
7.5
1%
Mar 29
CodeIgniter4 Language class DoS Vulnerability
Affected: before 4.4.7
CVE-2023-46240
7.5
1%
Oct 31
CodeIgniter is a PHP full-stack web framework
Affected: before 4.4.3
CVE-2022-23556
7.5
0%
Dec 22
CodeIgniter is a PHP full-stack web framework
Affected: 4.0.0 before 4.2.11
CVE-2017-1000247
7.5
1%
Nov 17
British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header…
Affected: 3.1.3
Showing 8