Skip to content
OpenAdvisories

Vendor

statamic

49 known vulnerabilities.

Products

cms 49
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-54244

    Statamic: Incorrect authorization lets view-only users submit Live Preview content reserved for editors

    Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.0 and 6.20.3, the Live Preview endpoint for existing entries and terms in src/Http/Controllers/CP/PreviewController.php only checked view authorization, but it accepts and re…

    statamic cms statamic/cms Packagist
  • Low 1.8
    CVE-2024-36119

    Password confirmation stored in plain text via registration form in statamic/cms

    Statamic is a, Laravel + Git powered CMS designed for building websites. In affected versions users registering via the `user:register_form` tag will have their password confirmation stored in plain text in their user file. This only affects sites matching **…

    statamic cms statamic/cms Packagist
  • Low 3.7
    CVE-2022-24784

    Discoverability of user password hash in Statamic CMS

    Statamic is a Laravel and Git powered CMS. Before versions 3.2.39 and 3.3.2, it is possible to confirm a single character of a user's password hash using a specially crafted regular expression filter in the users endpoint of the REST API. Multiple such reques…

    statamic cms statamic/cms Packagist