Skip to content
OpenAdvisories

Vendor

ProcessMaker

6 known vulnerabilities.

Products

processmaker 3 ProcessMaker Enterprise 2 ProcessMaker Open Source 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2013-10035 Public exploit

    ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Execution

    A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPage_Ajax.php, and cas…

    ProcessMaker ProcessMaker Open Source
  • High 8.6
    CVE-2025-34097 Public exploit

    ProcessMaker < 3.5.4 Authenticated Plugin Upload RCE

    An unrestricted file upload vulnerability exists in ProcessMaker versions prior to 3.5.4 due to improper handling of uploaded plugin archives. An attacker with administrative privileges can upload a malicious .tar plugin file containing arbitrary PHP code. Up…

    ProcessMaker processmaker