Skip to content
OpenAdvisories

Package · Packagist

getgrav/grav-plugin-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2026-42843

    grav-plugin-api: Grav API Privilege Escalation to Super Admin

    Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system management. Prior to 1.0.0-beta.15, an insecure direct object reference and logic flaw in the Grav API plugin (Use…

    getgrav grav-plugin-api getgrav/grav-plugin-api Packagist