Login Request a demo
E1
Product
e107
by e107inc · last CVE Oct 21, 2026
9
CVEs
0
On KEV
10.0
Max CVSS
3
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 3Medium 4Low 0
Severity
All severities9Critical2High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add e107 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46620
6.5
0%
May 26
e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check()
Affected: < 2.3.5
CVE-2026-43934
6.5
0%
May 26
e107: Broken Access Control in e107 comment edit allows cross-user comment modification
Affected: < 2.3.4
CVE-2026-114407
6.1
0%
Oct 21
e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter
Affected: 2.2.0 before 2.3.13
CVE-2026-43936
4.3
0%
May 26
e107: Server-Side Request Forgery (SSRF) in the remote file fetcher
Affected: < 2.3.4
Showing 4