Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how dedecms compares to other vendors in security performance

View Risk Score →

DedeCMS DedecmsDedeCMS Installation Wizard index.php _4_Setup file inclusion

Risk 39
Severity
1.3
First published (updated )
CVE-2026-19353

DedeCMS Dede CMSInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2026-51078

DedeCMS DedecmsDedeCMS Column Management search.php code injection

Risk 40
Severity
2
First published (updated )
CVE-2026-15533

DedeCMS DedecmsOS Command Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2026-38615

DedeCMS DedecmsDedeCMS carbuyaction.php RemoveXSS sql injection

Risk 52
Severity
5.5
First published (updated )
CVE-2026-10608
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

DedeCMS DedecmsDedeCMS flink.php dede_htmlspecialchars sql injection

Risk 52
Severity
5.5
First published (updated )
CVE-2026-10607

DedeCMS DedecmsDedeCMS Feedback feedback.php TrimMsg sql injection

Risk 52
Severity
5.5
First published (updated )
CVE-2026-10606

DedeCMS DedecmsDedeCMS download.php base64_decode server-side request forgery

Risk 46
Severity
2.1
First published (updated )
CVE-2026-10581

DedeCMS DedecmsCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2026-30643

DedeCMS DedecmsCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2026-29839
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

DedeCMS DedecmsCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2026-30694

DedeCMS DedecmsCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2024-30855

DedeCMS DedecmsDedeCMS freelist_main.php sql injection

Risk 79
Severity
8.8
First published (updated )
CVE-2025-15004

DedeCMS DedecmsDedeCMS Template dedetag.class.php command injection

Risk 49
Severity
2
EPSS
0.18%
First published (updated )
CVE-2025-6335

DedeCMS DedecmsDedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection

Risk 49
Severity
7.2
EPSS
0.03%
First published (updated )
CVE-2025-5137
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

DedeCMS DedecmsDedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error doe…

Risk 40
Severity
6.5
First published (updated )
CVE-2024-57241

DedeCMS DedecmsDedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scripting

Risk 34
Severity
5.4
First published (updated )
CVE-2024-12183

DedeCMS DedecmsDedeCMS soft_add.php cross site scripting

Risk 34
Severity
5.4
First published (updated )
CVE-2024-12182

DedeCMS DedecmsDedeCMS SWF File uploads_add.php cross site scripting

Risk 34
Severity
5.4
First published (updated )
CVE-2024-12181

DedeCMS DedecmsDedeCMS article_add.php cross site scripting

Risk 34
Severity
5.4
First published (updated )
CVE-2024-12180
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

DedeCMS DedecmsDedeCMS friendlink_add.php unrestricted upload

Risk 86
Severity
9.8
First published (updated )
CVE-2024-11138

DedeCMS DedecmsDedeCMS article_string_mix.php os command injection

Risk 58
Severity
8.8
EPSS
0.46%
First published (updated )
CVE-2024-9076

DedeCMS DedecmsXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2024-46372

DedeCMS DedecmsMalicious File Upload

Risk 77
Severity
8.8
First published (updated )
CVE-2024-46373

DedeCMS DedecmsCommand Injection

Risk 66
Severity
7.2
First published (updated )
CVE-2024-42636
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

DedeCMS DedecmsDedeCMS article_template_rand.php code injection

Risk 49
Severity
5.1
EPSS
0.04%
First published (updated )
CVE-2024-6940

DedeCMS DedecmsMalicious File Upload

Risk 86
Severity
9.8
First published (updated )
CVE-2024-35510

DedeCMS DedecmsMalicious File Upload

Risk 86
Severity
9.8
First published (updated )
CVE-2024-35375

DedeCMS DedecmsXSS

Risk 40
Severity
5.5
First published (updated )
CVE-2024-34959

DedeCMS DedecmsPath Traversal

Risk 38
Severity
6.5
First published (updated )
CVE-2024-34245
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203