grav
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 52 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 25, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Grav CMS before 2.0.11 Path Traversal via watermark
Grav CMS 2.0.7 through 2.0.10 Arbitrary Method Invocation via Blueprint
Grav before 2.0.7 Remote Code Execution via Blueprint dynamicData
Grav Stored Cross-Site Scripting via Shortcode Attribute Handlers
Authentication Bypass via Null Short-Circuit in Grav CMS Scheduler Webhook Token Check
Grav < 1.0.0-rc.16 CORS Misconfiguration via API Plugin
Grav < 2.0.4 ReDoS via regex_replace in Sandbox
Grav Flex-Objects < 1.4.3 Authorization Bypass via API
Grav < 2.0.4 2FA Bypass via Secret Regeneration
Grav < 2.0.4 File Access Bypass via Case Variation
Monitor grav in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.