Where
-Infinity
0

Trending

Last week
Last month
Last year

composer/getkirby/cmsInsufficient permission checks in the language settings in Kirby CMS

Risk 62
Severity
8.1
First published (updated )
CVE-2024-41964

Bastian Allgeier GmbH Kirby 3.10Reached end of life

EOL
Nov 27, 2025
First published (updated )
EOL-kirby-3.10

Bastian Allgeier GmbH Kirby 3.10Reached end of life

EOL
Nov 27, 2025
First published (updated )
latest-version-kirby-3.10

Bastian Allgeier GmbH Kirby 3.6Reached end of life

EOL
Jun 26, 2024
First published (updated )
EOL-kirby-3.6

Bastian Allgeier GmbH Kirby 3.6Reached end of life

EOL
Jun 26, 2024
First published (updated )
latest-version-kirby-3.6
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/getkirby/cmsKirby vulnerable to denial of service from unlimited password lengths

Risk 44
Severity
7.5
First published (updated )
CVE-2023-38492

composer/getkirby/cmsKirby vulnerable to Cross-site scripting (XSS) from MIME type auto-detection of uploaded files

Risk 34
Severity
5.7
First published (updated )
CVE-2023-38491

composer/getkirby/cmsKirby XML External Entity (XXE) vulnerability in the XML data handler

Risk 74
Severity
10
First published (updated )
CVE-2023-38490

composer/getkirby/cmsKirby vulnerable to Insufficient Session Expiration after a password change

Risk 55
Severity
7.3
First published (updated )
CVE-2023-38489

composer/getkirby/cmsKirby vulnerable to field injection in the KirbyData text storage handler

Risk 80
Severity
8.8
First published (updated )
CVE-2023-38488
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

getkirby Webmentions Kirbybastianallgeier Kirby Webmentions Plugin injection

Risk 86
Severity
9.8
First published (updated )
CVE-2017-20174

Bastian Allgeier GmbH Kirby 3.9Reached end of life

EOL
Nov 27, 2025
First published (updated )
latest-version-kirby-3.9

Bastian Allgeier GmbH Kirby 3.9Reached end of life

EOL
Nov 27, 2025
First published (updated )
EOL-kirby-3.9

getkirby KirbyKirby CMS vulnerable to user enumeration in the brute force protection

Risk 40
Severity
6.5
First published (updated )
CVE-2022-39315

Bastian Allgeier GmbH Kirby 3.8Reached end of life

EOL
Jan 16, 2025
First published (updated )
latest-version-kirby-3.8
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Bastian Allgeier GmbH Kirby 3.8Reached end of life

EOL
Jan 16, 2025
First published (updated )
EOL-kirby-3.8

getkirby KirbyCross-site scripting (XSS) from dynamic options in the multiselect field in Kirby

Risk 42
Severity
5.9
First published (updated )
CVE-2022-36037

getkirby KirbyXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2018-14520

getkirby StarterkitXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2022-35174

Bastian Allgeier GmbH Kirby 3.7Reached end of life

EOL
Oct 5, 2024
First published (updated )
latest-version-kirby-3.7
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Bastian Allgeier GmbH Kirby 3.7Reached end of life

EOL
Oct 5, 2024
First published (updated )
EOL-kirby-3.7

getkirby KirbyCross-site scripting (XSS) from image block content in the site frontend

Risk 54
Severity
7.3
First published (updated )
CVE-2021-41258

getkirby KirbyCross-site scripting (XSS) from writer field content in the site frontend

Risk 54
Severity
7.3
First published (updated )
CVE-2021-41252

getkirby KirbyCross-site scripting (XSS) from field and configuration text displayed in the Panel

Risk 48
Severity
7.1
First published (updated )
CVE-2021-32735

getkirby KirbyCross-site scripting (XSS) from unsanitized uploaded SVG files

Risk 49
Severity
7.6
First published (updated )
CVE-2021-29460
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Bastian Allgeier GmbH Kirby 3.5Reached end of life

EOL
Nov 15, 2023
First published (updated )
EOL-kirby-3.5

Bastian Allgeier GmbH Kirby 3.5Reached end of life

EOL
Nov 15, 2023
First published (updated )
latest-version-kirby-3.5

getkirby KirbyPHP Phar archives could be uploaded and executed in Kirby

Risk 72
Severity
9.1
First published (updated )
CVE-2020-26255

getkirby Kirby.dev domains treated as local in Kirby

Risk 40
Severity
6.8
First published (updated )
CVE-2020-26253

Bastian Allgeier GmbH Kirby 3.4Reached end of life

EOL
Nov 16, 2021
First published (updated )
latest-version-kirby-3.4
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203