Skip to content
OpenAdvisories

Product · Trilby Media

grav-plugin-flex-objects

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-72831

    Grav through 2.0.11 Authentication Bypass via Flex Objects

    The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController::update() checks only the general Flex directory permission and does not apply the additional target/…

    getgrav Trilby Media grav grav-plugin-flex-objects