Log in Start free

Craft

Products

ProductCVEsExploitedLatest
CMS31Jul 6, 2026

Exploited and recent CVEs

  • CVE-2025-35939 Medium 5.3 Exploited Craft CMS stores user-provided content in session files 1.3%
  • CVE-2026-14794 Medium 4.3 Craft CMS Charts Endpoint ChartsController.php actionGetNewUsersData improper authorization 0.4%
  • CVE-2026-14793 Medium 4.3 Craft CMS reorder-sets Endpoint GlobalsController.php actionReorderSets authorization 0.4%