A
Vendor security profile
admidio
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs23
Critical0
CISA KEV0
Public exploit17
Patch rate%22
Avg. CVSS6.1
12-month vulnerability rate
0
0
0
0
4
0
0
0
0
18
1
0
CVE KEV
CVE severity distribution
23toplam CVE
High7 (30%)
Medium14 (61%)
Low2 (9%)
Patch and exploitation view
%22
Verified patch
%0
CISA KEV
%74
Public exploit
5Patch available
0Partial
1Workaround
0Vendor: no patch
17Unknown
Latest vulnerabilities
5.2
CVE-2026-53760
Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests
A
WorkaroundEPSS %0
5.3
CVE-2026-82658
Admidio before 5.0.12 Broken Access Control via profile_function.php
A
Patch status unknownEPSS %0
8.7
CVE-2026-82657
Admidio before 5.0.12 Authentication Bypass via RSS feeds
A
Patch status unknownEPSS %0
2.1
CVE-2026-82656
Admidio before 5.0.12 Path Traversal via Photo ZIP Download
A
Patch status unknownEPSS %0
8.7
CVE-2026-82655
Admidio before 5.0.12 SQL Injection via relation_type_list
A
Patch status unknownEPSS %1
4.4
CVE-2026-47234
Admidio writes session IDs and auto-login cookie values to application logs
A
Patch status unknownEPSS %0
6.5
CVE-2026-47233
Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024
A
Patch status unknownEPSS %0
4.3
CVE-2026-47232
Admidio PKCS#12 private key export action lacks CSRF protection
A
Patch status unknownEPSS %0
8.1
CVE-2026-47231
Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders
A
Patch status unknownEPSS %0
6.5
CVE-2026-47230
Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders
A
Patch status unknownEPSS %0