Craft CMS
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 21 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 26, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Craft CMS Charts Endpoint ChartsController.php actionGetNewUsersData improper authorization
Craft CMS reorder-sets Endpoint GlobalsController.php actionReorderSets authorization
Craft CMS: Unauthorized Deletion of Destination Folders During Forced Moves
Craft CMS: Mass assignment via id in newAttributes during bulk duplicate overwrites existing elements
Craft CMS: Authorization bypass in `entries/move-to-section` via missing target-section save check
Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap
Craft CMS: Potential authenticated Remote Code Execution via referrer redirect
Craft CMS: Sensitive File Disclosure / Server-Side File Read
Craft CMS: Missing peer-permission check in `AssetsController::actionDeleteFolder` allows deletion of other users' assets
Craft CMS: Unauthorized Deletion of Source Assets During File Replacement
Monitor Craft CMS in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.