CC
Vendor
Craft CMS
4
CVEs
4
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-35939 In wildKEV | CC Craft CMS Craft CMS | 5.3 | May 7 | Craft CMS stores user-provided content in session files |
| CVE-2025-32432 In wildKEV | CC Craft CMS Craft CMS | 10.0 | Apr 25 | Craft CMS Allows Remote Code Execution |
| CVE-2025-23209 In wildKEV | CC Craft CMS Craft CMS | 8.1 | Jan 18 | Potential RCE with a compromised security key in craft/cms |
| CVE-2024-56145 In wildKEV | CC Craft CMS Craft CMS | 9.8 | Dec 18 | RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms |