grav
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 84 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 25, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Grav CMS before 2.0.16 Origin Validation Bypass via Referer
Grav CMS before 2.0.16 Timing Attack via verifyNonce
Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison
Grav CMS before 2.0.16 Information Disclosure via Twig Sandbox Bypass
Grav CMS before 2.0.16 Path Traversal via media_directory
Grav CMS before 2.0.16 Symlink Following via createLockFile
Grav before 2.0.16 Path Traversal via MediaUploadTrait deleteFile
Grav before 3.9.2 Host Header Injection via sendInvitationEmail
Grav API Plugin before 1.0.16 SSRF via DNS Rebinding
Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any account
Monitor grav in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.