ExpressionEngine

Products

ProductCVEsExploitedLatest
ExpressionEngine2–Jan 26, 2026

Exploited and recent CVEs

  • CVE-2025-59473 Medium 6.0 SQL Injection vulnerability in the Structure for Admin authenticated user 0.3%
  • CVE-2021-44534 Medium 6.5 Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure. 0.6%