Login Request a demo
VO
Product
volto
by plone · last CVE Oct 2, 2025
3
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 3Medium 0Low 0
Severity
All severities3Critical0High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add volto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-61668
8.7
0%
Oct 2
@plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user
Affected: < 16.34.1; >= 17.0.0, < 17.22.2; >= 18.0.0, < 18.27.2; >= 19.0.0-alpha.1, < 19.0.0-alpha.6
CVE-2025-58047
7.5
1%
Aug 28
Volto affected by possible DoS by invoking specific URL by anonymous user
Affected: < 16.34.0; >= 17.0.0, < 17.22.1; >= 18.0.0, < 18.24.0; >= 19.0.0-alpha.1, < 19.0.0-alpha.4
CVE-2022-24740
7.5
1%
Mar 14
Volto is a ReactJS-based frontend for the Plone Content Management System
Affected: 14.1.0 through 14.10.0; 14.0.0; 14.0.0; 14.0.0; 14.0.0; 14.0.0; +34 more
Showing 3