Vendor

craftcms

171 known vulnerabilities.

Products

cms 144 commerce 21 aws-s3 1 google-cloud 1 commerce-mollie 1 webhooks 1 azure-blob 1 CraftCMS 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2025-23209 Exploited EPSS 22%

Potential RCE with a compromised security key in craft/cms

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running…

craftcms cms craftcms/cms Packagist

Jan 18, 2025
KEV Feb 20, 2025