Skip to content
OpenAdvisories

Vendor

getgrav

212 known vulnerabilities.

Products

grav 158 grav-plugin-api 18 getgrav/grav 8 grav-plugin-login 7 grav-plugin-form 5 grav-plugin-admin 3 grav-plugin-shortcode-core 2 getgrav/grav-plugin-admin 2 grav-plugin-flex-objects 2 grav-plugin-guestbook 2 grav-plugin-comments 1 grav-plugin-data-manager 1 grav-plugin-star-ratings 1 grav-plugin-login-oauth 1 Grav CMS Admin Plugin 1 grav-plugin-datamanager 1 grav-plugin-admin2 1 GravCMS 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.0
    CVE-2026-100671 Public exploit

    Grav before 2.0.25 Session Cookie Theft via Twig Sandbox

    Grav is a flat-file CMS. In versions 2.0.19 through 2.0.24 — and in 2.0.0 through 2.0.18 and 1.7.x only where content Twig has been explicitly enabled — page content authored by a user holding only page-write permission is rendered through a Twig sandbox that…

    getgrav grav
  • High 8.8
    CVE-2026-75827 Public exploit

    Grav before 2.0.15 Arbitrary File Write via error_log

    Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the error…

    getgrav grav getgrav/grav Packagist
  • High 8.6
    CVE-2025-66301 Public exploit

    Grav ihas Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions

    Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/{page_name}, an editor with only permissions to change basic content on the form is now able to ch…

    getgrav grav getgrav/grav Packagist
  • High 8.7
    CVE-2025-66294 Public exploit

    Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass

    Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditio…

    getgrav grav getgrav/grav Packagist
  • High 8.8
    CVE-2024-28116 Public exploit

    Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass

    Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-Side Template Injection (SSTI), which allows any authenticated user (editor permissions are sufficient) to execute arbitrary code on the re…

    getgrav grav getgrav/grav Packagist
  • High 8.4
    CVE-2021-29440 Public exploit EPSS 30%

    Twig allowing dangerous PHP functions by default

    Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code executio…

    getgrav grav getgrav/grav Packagist