grav
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 88 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 25, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox
Grav Admin Plugin Path Traversal via Save As Language Code
Grav 2.0.0 through 2.0.17 Stored XSS via Modular Pages
Grav CMS before 2.0.16 Origin Validation Bypass via Referer
Grav CMS before 2.0.16 Timing Attack via verifyNonce
Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison
Grav CMS before 2.0.16 Information Disclosure via Twig Sandbox Bypass
Grav CMS before 2.0.16 Path Traversal via media_directory
Grav CMS before 2.0.16 Symlink Following via createLockFile
Monitor grav in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.