Skip to content
OpenAdvisories

Vendor

umbraco

52 known vulnerabilities.

Products

Umbraco-CMS 40 Umbraco.Forms.Issues 4 CMS 2 Forms 1 Umbraco.Engage.Forms 1 Umbraco.Workflow.Issues 1 UmbracoIdentityExtensions 1 Umbraco 1 Umbraco.Commerce.Issues 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2012-10054 Public exploit

    Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE

    Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path tra…

    umbraco CMS
  • Medium 5.3
    CVE-2025-24011 Public exploit

    Umbraco CMS Vulnerable to User Enumeration Feasible Based On Management API Timing and Response Codes

    Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, it's possible to determine whether an account exists based on an analysis of response codes and timing of Umbraco management …

    umbraco Umbraco-CMS Umbraco.Cms NuGet