Where
-Infinity
0

Trending

Last week
Last month
Last year

XWiki xwikiorg.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API

Risk 61
Severity
9.8
EPSS
0.32%
First published (updated )
CVE-2025-32969

maven/org.xwiki.platform:xwiki-platform-oldcoreorg.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API

Risk 56
Severity
8.8
EPSS
0.05%
First published (updated )
CVE-2025-32968

maven/org.xwiki.platform:xwiki-platform-messagestreamXWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wiki

Risk 17
Severity
4.7
EPSS
0.06%
First published (updated )
CVE-2025-32783

XWiki xwikiPrivilege escalation (PR) through realtime WYSIWYG editing in XWiki

Risk 55
Severity
9.1
EPSS
0.04%
First published (updated )
CVE-2025-23025

XWiki xwikiXWiki.org XWiki SolrSearchMacros text Command Injection Remote Code Execution Vulnerability

Risk 23
First published (updated )
Advisory
ZDI-24-1697
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

XWiki xwikiZDI-24-1697: XWiki.org XWiki SolrSearchMacros text Command Injection Remote Code Execution Vulnerability

Risk 23
First published (updated )
ZDI-CAN-23994

maven/org.xwiki.platform:xwiki-platform-administration-uiXWiki allows RCE from script right in configurable sections

Risk 75
Severity
9.1
First published (updated )
CVE-2024-55879

XWiki xwikiXWiki allows remote code execution from account through macro descriptions and XWiki.XWikiSyntaxMacrosList

Risk 86
Severity
10
First published (updated )
CVE-2024-55877

XWiki xwikiXWiki's scheduler in subwiki allows scheduling operations for any main wiki user

Risk 36
Severity
5.4
First published (updated )
CVE-2024-55876

XWiki xwikiXWiki Platform has an SQL injection in getdocuments.vm with sort parameter

Risk 89
Severity
9.8
First published (updated )
CVE-2024-55663
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

XWiki xwikiXWiki allows remote code execution through the extension sheet

Risk 86
Severity
10
First published (updated )
CVE-2024-55662

maven/org.xwiki.platform:xwiki-platform-notifications-uiData leak of notification filters of users in XWiki Platform

Risk 28
Severity
5.3
First published (updated )
CVE-2024-46979

maven/org.xwiki.platform:xwiki-platform-notifications-uiMissing checks for notification filter preferences editions in XWiki Platform

Risk 40
Severity
6.5
First published (updated )
CVE-2024-46978

maven/org.xwiki.platform:xwiki-platform-rest-serverXWiki Platform document history including authors of any page exposed to unauthorized actors

Risk 28
Severity
5.3
First published (updated )
CVE-2024-45591

maven/org.xwiki.platform:xwiki-platform-oldcoreXWiki Platform allows XSS through XClass name in string properties

Risk 78
Severity
9.1
First published (updated )
CVE-2024-43400
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.xwiki.platform:xwiki-platform-web-templatesIn XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them

Risk 78
Severity
9.1
First published (updated )
CVE-2024-43401

XWiki Pro MacrosPro Macros Remote Code Execution via Viewpdf and similar macros

Risk 87
Severity
10
First published (updated )
CVE-2024-42489

maven/org.xwiki.platform:xwiki-platform-web-templatesXWiki Platform XSS through conflict resolution

Risk 93
Severity
9.1
Exploited
First published (updated )
CVE-2024-41947

maven/org.xwiki.platform:xwiki-platform-search-uiXWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet

Risk 86
Severity
10
First published (updated )
CVE-2024-37901

XWiki xwikiXWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader

Risk 50
Severity
6.4
First published (updated )
CVE-2024-37900
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

XWiki xwikiXWiki Platform vulnerable to document deletion and overwrite from edit

Risk 23
Severity
4.3
First published (updated )
CVE-2024-37898

maven/org.xwiki.platform:xwiki-platform-rendering-macro-includeXWiki programming rights may be inherited by inclusion

Risk 86
Severity
10
First published (updated )
CVE-2024-38369

XWiki xwikiDisabling a user account changes its author, allowing RCE from user account in XWiki

Risk 78
Severity
9.1
First published (updated )
CVE-2024-37899

maven/org.xwiki.platform:xwiki-platform-uiextension-apiXWiki Platform remote code execution from account through UIExtension parameters

Risk 61
Severity
10
EPSS
0.04%
First published (updated )
CVE-2024-31997

maven/org.xwiki.commons:xwiki-commons-velocityXWiki Commons missing escaping of `{` in Velocity escapetool allows remote code execution

Risk 63
Severity
10
EPSS
0.04%
First published (updated )
CVE-2024-31996
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.xwiki.platform:xwiki-platform-realtime-uiXWiki Platform CSRF remote code execution through the realtime HTML Converter API

Risk 59
Severity
9.7
EPSS
0.04%
First published (updated )
CVE-2024-31988

maven/org.xwiki.platform:xwiki-platform-oldcoreXWiki Platform remote code execution from account via custom skins support

Risk 61
Severity
10
EPSS
0.04%
First published (updated )
CVE-2024-31987

maven/org.xwiki.platform:xwiki-platform-scheduler-uiXWiki Platform CSRF remote code execution through scheduler job's document reference

Risk 56
Severity
9.1
EPSS
0.04%
First published (updated )
CVE-2024-31986

maven/org.xwiki.platform:xwiki-platform-scheduler-uiXWiki Platform CSRF in the job scheduler

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2024-31985

XWiki xwikiXWiki Platform: Remote code execution through space title and Solr space facet

Risk 61
Severity
10
EPSS
0.04%
First published (updated )
CVE-2024-31984
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203