umbraco
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 72 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 27, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion
Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog
Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers
Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks
Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering
Umbraco Backoffice API Allows Unauthorized Modification of Domain Data
Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints
Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac
Umbraco v8.14.1 - 'baseUrl' SSRF
Monitor umbraco in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.