Login Request a demo
DO
Product
Dotclear
by dotclear · last CVE Dec 19, 2025
32
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities32In the news0Timeline
Severity mix
Critical 0High 5Medium 8Low 1
Severity
All severities32Critical0High5Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dotclear to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-53952
8.8
1%
Dec 19
Dotclear 2.25.3 Authenticated Remote Code Execution via File Upload
Affected: 2.25.3
CVE-2024-58281
8.8
1%
Dec 10
Dotclear 2.29 Remote Code Execution via Authenticated File Upload
Affected: 2.29
CVE-2015-8832
8.8
3%
Feb 9
Multiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2.8.2 allow remote authenticated users with "manage their own media items" and…
Affected: through 2.8.1
CVE-2016-7902
8.8
3%
Jan 4
Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permissions to manage media items to execute…
Affected: through 2.10.2
CVE-2016-9268
7.2
5%
Nov 10
Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated…
Affected: through 2.10.4
Showing 5