CC
Vendor security profile4 actively exploited CVEs
Craft CMS
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical2
CISA KEV4
Public exploit8
Patch rate%64
Avg. CVSS7.3
12-month vulnerability rate
0
0
5
0
1
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
11toplam CVE
Critical2 (18%)
High2 (18%)
Medium4 (36%)
Uncertain3 (27%)
Patch and exploitation view
%64
Verified patch
%36
CISA KEV
%73
Public exploit
7Patch available
0Partial
3Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
-
CVE-2024-56145 Actively exploited
Craft CMS Code Injection Vulnerability
CC
WorkaroundEPSS %97
-
CVE-2025-35939 Actively exploited
Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
CC
WorkaroundEPSS %1
10.0
CVE-2025-32432 Actively exploited
Code injection in Craftcms Craft Cms
C
Patch verifiedEPSS %100
-
CVE-2025-23209 Actively exploited
Craft CMS Code Injection Vulnerability
CC
WorkaroundEPSS %22