Craft CMS: exploited vulnerabilities
- 4exploited vulnerabilities
- 0used by ransomware
- Mar 20, 2026latest one added
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Mar 20, 2026 | Code Injection | Craft CMS | Critical 10.0 | 99.8% |
| Jun 2, 2025 | External Control of Assumed-Immutable Web Parameter | Craft CMS | Medium 6.9 | 1.3% |
| Jun 2, 2025 | Code Injection | Craft CMS | Critical 9.3 | 97% |
| Feb 20, 2025 | Code Injection | Craft CMS | High 8.1 | 22% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.