MA
Product
Mautic
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 12Low 1
Watch
Add Mautic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8092 | 9.8 | Apr 18 | Mautic before 2.13.0 allows CSV injection Affected: before 2.13.0 |
| CVE-2025-13828 | 9.0 | Dec 2 | Mautic user without privileged access to the Marketplace can install and uninstall composer packages Affected: <4.4.18, <5.2.9, <6.0.7 |
| CVE-2020-35129 | 9.0 | Jan 19 | Mautic before 3.2.4 is affected by stored XSS Affected: before 3.2.4 |
| CVE-2026-3105 | 8.8 | Feb 24 | SQL Injection in Contact Activity API Sorting Affected: >= 2.10.0 before < 4.4.19 <5.2.10 <6.0.8 <7.0.1 |
| CVE-2025-13827 | 8.8 | Dec 2 | GrapesJsBuilder File Upload allows all file uploads Affected: <4.4.18, <5.2.9, <6.0.7 |
| CVE-2017-1000489 | 8.1 | Jan 3 | Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address Affected: 2.9.0; 2.9.2; 2.10.0; 2.11.0 |
| CVE-2018-10189 | 7.5 | Apr 17 | An issue was discovered in Mautic 1.x and 2.x before 2.13.0 Affected: 1.0.0 through 1.4.1; 2.0.0 before 2.13.0 |
| CVE-2017-1000046 | 7.5 | Jul 17 | Mautic 2.6.1 and earlier fails to set flags on session cookies Affected: through 2.6.1 |
| CVE-2025-5257 | 6.5 | May 28 | Predictable Page Indexing Might Lead to Sensitive Data Exposure Affected: > 4.0 before < 6.0.2, <5.4.6, <4.4.16 |
| CVE-2017-1000490 | 6.5 | Jan 3 | Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the… Affected: 1.0.0; 1.2.0; 2.9.0; 2.9.2; 2.10.0; 2.11.0 |
| CVE-2018-8071 | 6.1 | Apr 18 | Mautic before v2.13.0 has stored XSS via a theme config file Affected: before 2.13.0 |
| CVE-2017-1000506 | 6.1 | Feb 9 | Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code Affected: through 2.11.0 |
| CVE-2017-1000488 | 6.1 | Jan 3 | Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form Affected: 2.9.0; 2.9.2; 2.10.0; 2.11.0 |
| CVE-2025-9824 | 5.9 | Sep 3 | User Enumeration via Response Timing Affected: >= 4.4.0 before < 4.4.17; >= 5.0.0-alpha before < 5.2.8; >= 6.0.0-alpha before < 6.0.5 |
| CVE-2025-9822 | 5.5 | Sep 3 | Secret data extraction via elfinder Affected: >= 4.4.0 before < 4.4.17; >= 5.0.0-alpha before < 5.2.8; >= 6.0.0-alpha before < 6.0.5 |
| CVE-2025-5256 | 5.4 | May 28 | Open Redirect vulnerability on user unlock path Affected: > 1.0.0 before < 6.0.2, < 5.2.6, < 4.4.16 |
| CVE-2024-47057 | 5.3 | May 28 | User name enumeration possible due to response time difference on password reset form Affected: > 1.0 before < 6.0.2, < 5.2.6, < 4.4.16 |
| CVE-2024-47056 | 5.1 | May 28 | Mautic does not shield .env files from web traffic Affected: > 4.4.0 before < 6.0.2, < 5.2.6, <4.4.16 |
| CVE-2025-9823 | 4.8 | Sep 3 | Reflected XSS in lead:addLeadTags - Quick Add Affected: >= 4.4.0 before < 4.4.17; >= 5.0.0-alpha before < 5.2.8; >= 6.0.0-alpha before < 6.0.5 |
| CVE-2024-47055 | 4.3 | May 28 | Segment cloning doesn't have a proper permission check Affected: > 5.0.0 before < 5.2.6, < 6.0.2 |
| CVE-2025-9821 | 2.7 | Sep 3 | SSRF via webhook function Affected: >= 4.4.0 through < 4.4.17; >= 5.0.0-alpha through < 5.2.8; >= 6.0.0-alpha through < 6.0.5 |
Showing 21