Where
-Infinity
0

composer/mautic/coreSegment cloning doesn't have a proper permission check

Risk 22
Severity
4.3
First published (updated )

composer/mautic/coreUser name enumeration possible due to response time difference on password reset form

Risk 27
Severity
5.3
First published (updated )

composer/mautic/coreMautic does not shield .env files from web traffic

Risk 32
Severity
5.1
First published (updated )

composer/mautic/corePredictable Page Indexing Might Lead to Sensitive Data Exposure

Risk 28
Severity
6.5
EPSS
0.10%
First published (updated )

Acquia MauticInsufficient authentication in upgrade flow

Risk 59
Severity
7.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/mautic/coreUsers enumeration - weak password login

Risk 23
Severity
4.3
First published (updated )

Acquia MauticXSS in contact tracking and page hits report

Risk 53
Severity
7.3
First published (updated )

composer/mautic/core-libXSS in contact/company tracking (no authentication)

Risk 39
Severity
6.1
First published (updated )

composer/mautic/core-libCross-site Scripting (XSS) - stored (edit form HTML field)

Risk 30
Severity
4.8
First published (updated )

composer/mautic/coreImproper Access Control in UI upgrade process

Risk 57
Severity
7
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Acquia MauticImproper regex in htaccess file

Risk 66
Severity
9.1
First published (updated )

Acquia MauticServer-Side Request Forgery in Asset section

Risk 51
Severity
6.5
First published (updated )

composer/mautic/coreSensitive Data Exposure due to inadequate user permission settings

Risk 72
Severity
8.3
First published (updated )

composer/mautic/coreSQL Injection in dynamic Reports

Risk 69
Severity
7.2
First published (updated )

composer/mautic/coreRelative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)

Risk 62
Severity
8.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/mautic/coreXSS in Notifications via saving Dashboards

Risk 35
Severity
5.4
First published (updated )

Acquia MauticXSS Cross-site Scripting Stored (XSS) - Description field

Risk 78
Severity
9
First published (updated )

Acquia MauticXSS

Risk 76
Severity
9.6
First published (updated )

Acquia MauticXSS

Risk 60
Severity
7.6
First published (updated )

Acquia MauticXSS vulnerability on password reset page

Risk 47
Severity
6.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Acquia MauticUse of a Broken or Risky Cryptographic Algorithm

Risk 19
Severity
3.5
First published (updated )

Acquia MauticXSS vulnerability on asset view

Risk 68
Severity
7.1
First published (updated )

Acquia MauticXSS vulnerability on contacts view

Risk 74
Severity
8.3
First published (updated )

Acquia MauticStored XSS vulnerability on Bounce Management Callback

Risk 56
Severity
8.2
First published (updated )

composer/mautic/coreInfoleak

Risk 48
Severity
5.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/mautic/coreXSS

Risk 78
Severity
9.1
First published (updated )

composer/mautic/coreXSS

Risk 78
Severity
9.1
First published (updated )

composer/mautic/coreXSS

Risk 83
Severity
9.6
First published (updated )

composer/mautic/coreXSS

Risk 84
Severity
9.7
First published (updated )

Mautic MauticInfoleak

Risk 44
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203