GE
Product
GetSimpleCMS-CE
15
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 4High 8Medium 3Low 0
Watch
Add GetSimpleCMS-CE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53952 | 9.8 | Sep 11 | GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw Affected: <= 3.3.22 |
| CVE-2026-56662 | 9.6 | Oct 1 | GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request Affected: < 1.5 |
| CVE-2026-56660 | 9.1 | Oct 1 | GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction Affected: < 1.5 |
| CVE-2026-53953 | 9.1 | Oct 1 | GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover Affected: = 3.3.22 |
Showing 4