Where
-Infinity
0

Trending

Last week
Last month
Last year

CraftCMS Craft CMSCraft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTI

Risk 51
Severity
7.3
EPSS
0.42%
First published (updated )
CVE-2025-46731

BleepingComputerCraft CMS RCE exploit chain used in zero-day attacks to steal data

Exploited
Zeroday
First published (updated )
News
BleepingComputer

BleepingComputerDHS says CISA will not stop monitoring Russian cyber threats

Exploited
First published (updated )
News
BleepingComputer

BleepingComputerCISA flags Craft CMS code injection flaw as exploited in attacks

Exploited
First published (updated )
News
BleepingComputer

Pixel & Tonic Craft CMS 3Reached end of life

EOL
Apr 30, 2024
Support Ends
Apr 30, 2023
First published (updated )
EOL-craft-cms-3
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Pixel & Tonic Craft CMS 3Reached end of life

EOL
Apr 30, 2024
Support Ends
Apr 30, 2023
First published (updated )
latest-version-craft-cms-3

Craft CMSCraft has a Potential Remote Code Execution via missing path normalization & Twig SSTI

Risk 69
Severity
7.2
First published (updated )
CVE-2024-52293

composer/craftcms/cmsCraft Allows Attackers to Read Arbitrary System Files

Risk 45
Severity
7.7
First published (updated )
CVE-2024-52292

Craft CMSCraft has a Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution

Risk 69
Severity
8.5
First published (updated )
CVE-2024-52291

composer/craftcms/cmsCraft CMS stored XSS in breadcrumb list and title fields

Risk 42
Severity
5.5
First published (updated )
CVE-2024-45406
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Craft CMSCraft CMS Allows TOTP Token To Stay Valid After Use

Risk 73
Severity
7.5
First published (updated )
CVE-2024-41800

composer/craftcms/cmsSQL Injection

Risk 89
Severity
9.8
First published (updated )
CVE-2024-37843

composer/craftcms/cmsAn issue discovered in Craft CMS version 4.6.1.1 allows remote attackers to cause a denial of servic…

Risk 45
Severity
7.5
First published (updated )
CVE-2023-36260

composer/superbig/craft-auditXSS

Risk 35
Severity
5.4
First published (updated )
CVE-2023-36259

composer/craftcms/cmsCraft CMS Privilege Escalation

Risk 57
Severity
8.8
EPSS
0.07%
First published (updated )
CVE-2024-21622
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/craftcms/cmsCraft CMS Remote Code Execution vulnerability

Risk 84
Severity
10
First published (updated )
CVE-2023-41892

Craft CMSCraft CMS vulnerable to Remote Code Execution via validatePath bypass

Risk 67
Severity
7.2
First published (updated )
CVE-2023-40035

composer/craftcms/cmsXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2023-33495

composer/craftcms/cmsCode Injection

Risk 69
Severity
7.2
First published (updated )
CVE-2023-30179

composer/craftcms/cmsCraft CMS stored XSS in indexedVolumes

Risk 40
Severity
5.5
First published (updated )
CVE-2023-33197
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Craft CMSCraft CMS stored XSS in review volume

Risk 40
Severity
5.5
First published (updated )
CVE-2023-33196

composer/craftcms/cmsCraft CMS XSS in RSS widget feed

Risk 38
Severity
6.1
First published (updated )
CVE-2023-33195

CrafterCMS CrafterCMSCraftCMS stored XSS in Quick Post widget error message

Risk 29
Severity
4.8
First published (updated )
CVE-2023-33194

composer/craftcms/cmsXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2023-2817

composer/craftcms/cmsRemote Code Execution via unrestricted file extension in Craft CMS

Risk 67
Severity
7.2
First published (updated )
CVE-2023-32679
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/craftcms/cmsCode Injection

Risk 78
Severity
8.8
First published (updated )
CVE-2023-30130

composer/craftcms/cmsCraft CMS vulnerable to cross site scripting in RSS feed widget

Risk 38
Severity
6.1
First published (updated )
CVE-2023-31144

composer/craftcms/cmsXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-30177

Craft CMSCraft CMS stored cross-site scripting vulnerability

Risk 38
Severity
6.1
First published (updated )
CVE-2023-23927

composer/craftcms/cmsInfoleak, CSRF

Risk 46
Severity
7.5
First published (updated )
CVE-2022-37783
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203