Where
-Infinity
0

Trending

Last week
Last month
Last year

Plone ploneThe HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allo…

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2024-23756

pip/ploneXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2021-3313

pip/PloneAn open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an …

Risk 39
Severity
6.1
First published (updated )
CVE-2020-7936

pip/PloneXSS

Risk 35
Severity
5.4
First published (updated )
CVE-2020-7937

pip/Ploneplone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate t…

Risk 82
Severity
8.8
First published (updated )
CVE-2020-7938
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pip/PloneSQL Injection

Risk 82
Severity
8.8
First published (updated )
CVE-2020-7939

pip/PloneMissing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak pa…

Risk 45
Severity
7.5
First published (updated )
CVE-2020-7940

pip/plone.app.contenttypesA privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PU…

Risk 89
Severity
9.8
First published (updated )
CVE-2020-7941

Plone plonePlone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection…

Risk 23
Severity
4.3
First published (updated )
CVE-2017-5524

Plone plonePlone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV req…

Risk 54
Severity
7.5
First published (updated )
CVE-2016-4041
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Plone ploneInfoleak

Risk 28
Severity
5.3
First published (updated )
CVE-2016-4042

Plone ploneChameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restri…

Risk 31
Severity
4.9
First published (updated )
CVE-2016-4043

Plone ploneXSS

Risk 39
Severity
6.1
First published (updated )
CVE-2016-7147

Plone ploneZope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo…

Risk 45
Severity
7.5
First published (updated )
CVE-2012-6661

Plone ploneProducts/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass r…

Risk 36
Severity
4.9
First published (updated )
CVE-2013-7061
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Plone ploneInfoleak

Risk 28
Severity
5.3
First published (updated )
CVE-2013-7060

Plone ploneInput Validation

Risk 19
Severity
3.5
First published (updated )
CVE-2013-4199

Plone plonemail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remot…

Risk 24
Severity
4.3
First published (updated )
CVE-2013-4198

Plone ploneInput Validation

Risk 63
Severity
8.1
First published (updated )
CVE-2013-4197

Plone ploneInfoleak

Risk 28
Severity
5.3
First published (updated )
CVE-2013-4196
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Plone ploneInput Validation

Risk 37
Severity
4.7
First published (updated )
CVE-2013-4195

Plone ploneInfoleak

Risk 23
Severity
3.7
First published (updated )
CVE-2013-4194

Plone plonetypeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not prope…

Risk 37
Severity
5.9
First published (updated )
CVE-2013-4193

Plone ploneInput Validation

Risk 40
Severity
6.5
First published (updated )
CVE-2013-4192

Plone ploneInfoleak

Risk 37
Severity
4.8
First published (updated )
CVE-2013-4191
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Plone ploneMultiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plo…

Risk 48
Severity
4.9
First published (updated )
CVE-2013-4189

Plone ploneXSS

Risk 25
Severity
4.7
First published (updated )
CVE-2013-4190

Plone plonetraverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote at…

Risk 28
Severity
4.4
First published (updated )
CVE-2013-4188

Plone ploneXSS

Risk 23
Severity
4.3
First published (updated )
CVE-2011-1340

Plone PlonePASThe PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly h…

Risk 41
Severity
6
First published (updated )
CVE-2009-0662
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203