automad
Security Risk Profile
20
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 29, 2022 to present
9
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
5.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
20/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
5Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
Malicious File Upload
2
3
CSRF
1
4
SSRF
1
5
Code Injection
1
Most Affected Products
1. Automad Automad12
2. composer/automad/automad7
3. Automad Password Reset Endpoint1
Recent Vulnerabilities
See more →CVE-2026-19965
CVSS 2.9low
automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy
8/17/2026🔧 No Patch
CVE-2024-40111
CVSS 4.8medium
8/23/2024🔧 No Patch
CVE-2024-40400
CVSS 8.8high
7/19/2024
CVE-2023-7038
CVSS 6.5EPSS 0%medium
automad User Creation cross-site request forgery
12/21/2023
CVE-2023-7037
CVSS 8.8EPSS 0%high
automad FileController.php import server-side request forgery
12/21/2023🔧 No Patch
CVE-2023-7036
CVSS 5.8EPSS 0%medium
automad Content Type FileCollectionController.php upload unrestricted upload
12/21/2023🔧 No Patch
CVE-2023-7035
CVSS 1.9EPSS 0%low
automad Setting post.php cross site scripting
12/21/2023🔧 No Patch
CVE-2021-37502
CVSS 5.4medium
2/3/2023
CVE-2022-1536
CVSS 5.4medium
automad Dashboard cross site scripting
4/29/2022🔧 No Patch
Monitor automad in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.