C
Vendor security profile
Cotonti
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs20
Critical3
CISA KEV0
Public exploit8
Patch rate%60
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
0
0
5
2
1
12
0
CVE KEV
CVE severity distribution
20toplam CVE
Critical3 (15%)
High6 (30%)
Medium11 (55%)
Patch and exploitation view
%60
Verified patch
%0
CISA KEV
%40
Public exploit
12Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
5.3
CVE-2026-101093
Cotonti through 1.0.0 Cross-Site Request Forgery via User Group Deletion
C
Patch verifiedEPSS %0
5.3
CVE-2026-100524
Cotonti through 1.0.0 Cross-Site Request Forgery via Extensions Manager
C
Patch verifiedEPSS %0
5.1
CVE-2026-100523
Cotonti through 1.0.0 Open Redirect via message.php redirect parameter
C
Patch verifiedEPSS %0
5.1
CVE-2026-100522
Cotonti through 1.0.0 Reflected XSS via message.php lng parameter
C
Patch verifiedEPSS %0
5.1
CVE-2026-100521
Cotonti through 1.0.0 Reflected XSS via search highlight parameter
C
Patch verifiedEPSS %0
5.3
CVE-2026-93873
Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin
C
Patch verifiedEPSS %0
7.7
CVE-2026-93872
Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter
C
Patch verifiedEPSS %1
5.1
CVE-2026-93871
Cotonti through 1.0.0 Stored Open Redirect via Page redir: Prefix
C
Patch verifiedEPSS %0
5.3
CVE-2026-93870
Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler
C
Patch verifiedEPSS %0
5.3
CVE-2026-93869
Cotonti through 1.0.0 Open Redirect via Unanchored cot_url_check() Regex
C
Patch verifiedEPSS %0