Skip to content
OpenAdvisories

Product · getgrav

grav-plugin-data-manager

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-109316

    Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated File Deletion via Admin

    Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known d…

    getgrav grav-plugin-data-manager