Login Request a demo
LI
Product
Livewire
by Laravel · last CVE Jul 17, 2025
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news2Timeline
Severity mix
Critical 2High 1Medium 1Low 0
Severity
All severities4Critical2High1Medium1Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Livewire to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54068
In wildKEV
9.8
96%
Jul 17
Livewire vulnerable to remote command execution during property update hydration
Affected: 3.0.0 before 3.6.4
CVE-2024-47823
9.8
1%
Oct 8
Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP
Affected: before 2.12.7; 3.0.0 before 3.5.2
CVE-2024-22859
8.8
0%
Feb 1
Cross-Site Request Forgery (CSRF) vulnerability in livewire before v3.0.4, allows remote attackers to execute arbitrary code getCsrfToken function
Affected: before 3.0.4
CVE-2024-21504
6.1
1%
Mar 19
Versions of the package livewire/livewire from 3.3.5 and before 3.4.9 are vulnerable to Cross-site Scripting (XSS) when a page uses [Url] for a property
Affected: 3.3.5 through 3.4.9
Showing 4