getgrav
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 77 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 19, 2018 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Grav before 2.0.9 Remote Code Execution via FlexDirectory
Grav < 1.0.6 API Key Scope Bypass via ApiKeyAuthenticator
Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
Grav - Arbitrary File Upload via Avatar Endpoint
Grav - Cross-Site Scripting in Admin Plugin Page Editor
Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()
Grav: Low-privileged API users can create super-admin accounts via blueprint-upload
Grav: Stored XSS via Tag Injection
Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.
Grav: Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic
Monitor getgrav in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.