Login Request a demo
CO
Product
CouchCMS
by Couchcms · last CVE May 16, 2026
6
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 1
Severity
All severities6Critical0High1Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CouchCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-29002
7.2
0%
Apr 10
CouchCMS Privilege Escalation via f_k_levels_list Parameter
Affected: through 2.4.0
CVE-2025-67004
6.5
6%
Jan 9
** Disputed ** An Information Disclosure vulnerability in CouchCMS 2.4 allow an Admin user to read arbitrary files via traversing directories back after back
Affected: 2.4
CVE-2023-41609
6.1
0%
Sep 11
An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL
Affected: 2.3
CVE-2021-47955
5.4
0%
May 16
CouchCMS 2.2.1 Cross-Site Scripting via SVG File Upload
Affected: 2.2.1
CVE-2021-47958
4.3
0%
May 15
CouchCMS 2.2.1 Server-Side Request Forgery via SVG upload
Affected: 2.2.1
CVE-2025-15005
3.7
0%
Dec 22
CouchCMS reCAPTCHA config.example.php hard-coded key
Affected: 2.0; 2.1; 2.2; 2.3; 2.4
Showing 6