Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how sitecore compares to other vendors in security performance

View Risk Score →

Sitecore Experience Manager (XM)Sitecore Experience Platform Cross-Site Scripting Vulnerability

Risk 47
Severity
7.1
First published (updated )
CVE-2025-53692

The RegisterAttackers snooping around Sitecore, dropping malware via public sample keys

Exploited
First published (updated )
News
The Register

BleepingComputerHackers exploited Sitecore zero-day flaw to deploy backdoors

Zeroday
First published (updated )
News
BleepingComputer

Sitecore Experience ManagerSitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Risk 96
Severity
9
Exploited
First published (updated )
CVE-2025-53690

Sitecore Experience PlatformSitecore Experience Remote Code Execution through Insecure Deserialization

Risk 79
Severity
8.8
First published (updated )
CVE-2025-53691
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sitecore Experience PlatformHTML Cache Poisoning through Unsafe Reflections

Risk 86
Severity
9.8
First published (updated )
CVE-2025-53693

Sitecore Experience PlatformInformation Disclosure in ItemServices API

Risk 43
Severity
7.5
First published (updated )
CVE-2025-53694

Sitecore Experience PlatformSitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS

Risk 34
Severity
5.1
First published (updated )
CVE-2022-4979

Sitecore Experience PlatformSitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path

Risk 33
Severity
6.9
First published (updated )
CVE-2015-10142

Sitecore Experience PlatformSitecore XM/XP/XC and Managed Cloud 9.2 - 10.4 RCE

Risk 44
Severity
9.3
First published (updated )
CVE-2025-34138
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sitecore Experience PlatformSitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read

Risk 47
Severity
8.7
First published (updated )
CVE-2025-34139

Sitecore JSS React Sample ApplicationSitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure

Risk 47
Severity
8.7
First published (updated )
CVE-2020-36850

Sitecore Experience PlatformSitecore PowerShell Extension RCE via Unrestricted Upload

Risk 79
Severity
8.8
First published (updated )
CVE-2025-34511

Sitecore Experience PlatformSitecore XM, XC, and XP Post-Auth RCE via Zip Slip

Risk 79
Severity
8.8
First published (updated )
CVE-2025-34510

Sitecore Experience PlatformSitecore XM and XP Hardcoded Credentials

Risk 43
Severity
7.5
First published (updated )
CVE-2025-34509
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

The RegisterSitecore CMS flaw let attackers brute-force 'b' for backdoor

Zeroday
First published (updated )
News
The Register

BleepingComputerSitecore CMS exploit chain starts with hardcoded 'b' password

First published (updated )
News
BleepingComputer

sitecore Experience Manager (XM)Code Injection

Risk 65
Severity
5.3
Exploited
EPSS
58.46%
First published (updated )
CVE-2025-27218

Sitecore Experience CommerceInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2024-46938

Sitecore Experience CommerceCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2023-35813
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sitecore Experience CommerceAn issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), …

Risk 43
Severity
7.5
First published (updated )
CVE-2023-33651

Sitecore Experience PlatformSitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execut…

Risk 79
Severity
8.8
First published (updated )
CVE-2023-33652

Sitecore Experience PlatformSitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execut…

Risk 79
Severity
8.8
First published (updated )
CVE-2023-33653

Sitecore Experience PlatformDeserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attacke…

Risk 86
Severity
9.8
First published (updated )
CVE-2023-27068

Sitecore Experience PlatformPath Traversal

Risk 43
Severity
7.5
First published (updated )
CVE-2023-27067
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sitecore Experience PlatformPath Traversal

Risk 38
Severity
6.5
First published (updated )
CVE-2023-27066

Sitecore Experience ManagerMalicious File Upload

Risk 66
Severity
7.2
First published (updated )
CVE-2023-26262

Sitecore Experience PlatformSitecore XP Remote Command Execution Vulnerability

Risk 100
Severity
9.8
Exploited
First published (updated )
CVE-2021-42237

Sitecore SitecoreMalicious File Upload

Risk 79
Severity
8.8
First published (updated )
CVE-2021-38366

Sitecore CMSXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2019-11198
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203