Login Request a demo
UM
Product
Umbraco
by umbraco · last CVE Jan 15, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Umbraco to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-13957
9.8
1%
Oct 2
In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter
Affected: 7.3.8
CVE-2015-8814
8.8
1%
Mar 3
Umbraco before 7.4.0 allows remote attackers to bypass anti-forgery security measures and conduct cross-site request forgery (CSRF) attacks as demonstrated by editing user account…
Affected: 7.3.8
CVE-2015-8813
8.2
11%
Mar 3
The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackers to conduct server-side request…
Affected: through 7.3.8
CVE-2015-8815
6.1
1%
Mar 3
Multiple cross-site scripting (XSS) vulnerabilities in Umbraco before 7.4.0 allow remote attackers to inject arbitrary web script or HTML via the name parameter to (1) the media…
Affected: through 7.3.8
CVE-2021-47776
5.3
0%
Jan 15
Umbraco v8.14.1 - 'baseUrl' SSRF
Affected: 8.14.1
Showing 5