Login Request a demo
CO
Product
contao
by contao · last CVE Oct 9, 2026
42
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities42In the news0Timeline
Severity mix
Critical 3High 6Medium 29Low 4
Severity
All severities42Critical3High6Medium29Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add contao to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-45398
8.8
1%
Sep 17
Contao is an Open Source CMS
Affected: 4.0.0 before 4.13.49; 5.0.0 before 5.3.15; 5.4.0 before 5.4.3
CVE-2012-4383
8.8
1%
Jan 29
contao prior to 2.11.4 has a sql injection vulnerability
Affected: before 2.11.4
CVE-2019-19745
8.8
1%
Dec 17
Contao 4.0 through 4.8.5 allows PHP local file inclusion
Affected: 4.4 through 4.4.45; 4.8 through 4.8.5; 4.0; 4.1; 4.2; 4.3; +3 more
CVE-2021-37627
7.2
1%
Aug 11
Contao is an open source CMS that allows creation of websites and scalable web applications
Affected: 4.4.0 before 4.4.56; 4.9.0 before 4.9.18; 4.11.0 before 4.11.7; 4.0.0; 4.1.0; 4.2.0; +6 more
CVE-2021-37626
7.2
1%
Aug 11
Contao is an open source CMS that allows you to create websites and scalable web applications
Affected: 4.4.0 before 4.4.56; 4.9.0 before 4.9.18; 4.11.0 before 4.11.7; 4.0.0; 4.1.0; 4.2.0; +6 more
CVE-2024-30262
7.1
0%
Apr 9
Contao is an open source content management system
Affected: before 4.13.40
Showing 6