Skip to content
OpenAdvisories

Vendor

wintercms

24 known vulnerabilities.

Products

winter 23 wn-dusk-plugin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-27591

    Winter: Privilege escalation by authenticated backend users

    Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.0.477, 1.1.12, and 1.2.12, Winter CMS allowed authenticated backend users to escalate their accounts level of access to the system by modifying the ro…

    wintercms winter winter/wn-backend-module Packagist