Login Request a demo
KO
Product
KodExplorer
by kodcloud · last CVE Oct 25, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 4High 4Medium 7Low 1
Severity
All severities16Critical4High4Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add KodExplorer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6853
9.8
1%
Dec 16
kalcaddle KodExplorer app.php index server-side request forgery
Affected: before 4.52.01
CVE-2023-6852
9.8
1%
Dec 16
kalcaddle KodExplorer app.php server-side request forgery
Affected: before 4.52.01
CVE-2023-6851
9.8
1%
Dec 16
kalcaddle KodExplorer ZIP Archive app.php unzipList code injection
Affected: before 4.52.01
CVE-2023-6850
9.8
1%
Dec 16
kalcaddle KodExplorer API Endpoint unrestricted upload
Affected: before 4.52.01
CVE-2022-4944
8.8
3%
Apr 22
kalcaddle KodExplorer cross-site request forgery
Affected: through 4.49
CVE-2022-46154
7.5
1%
Dec 6
Arbitrary file access in KodExplorer
Affected: before 4.50
CVE-2026-6569
7.3
0%
Apr 19
kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
CVE-2026-6568
7.3
1%
Apr 19
kodcloud KodExplorer Public Share share.class.php initShareOld path traversal
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
CVE-2026-116057
New
6.3
0%
Oct 25
KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
CVE-2026-116056
New
6.3
0%
Oct 25
KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
CVE-2026-6571
6.3
0%
Apr 19
kodcloud KodExplorer systemRole.class.php roleGroupAction authorization
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
CVE-2025-34504
6.1
0%
Dec 11
KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
Affected: 4.52
CVE-2023-49489
6.1
1%
Dec 19
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST…
Affected: 4.51
CVE-2021-36646
6.1
1%
Sep 6
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page
Affected: 4.45
CVE-2023-37153
6.1
1%
Jul 10
KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature
Affected: 4.51
CVE-2026-6570
2.7
0%
Apr 19
kodcloud KodExplorer systemMember.class.php initInstall authorization
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +34 more
Showing 16