Log in Start free

Grav

Products

ProductCVEsExploitedLatest
Grav5–Jul 8, 2026
CMS1–Apr 28, 2026
grav-plugin-api1–Jun 18, 2026

Exploited and recent CVEs

  • CVE-2026-58657 Medium 4.8 Grav - Stored CSS Injection via Markdown Image resize() Action 0.3%
  • CVE-2026-58654 Medium 4.3 Grav - Arbitrary File Upload via Avatar Endpoint 0.4%
  • CVE-2026-56700 Critical 9.8 Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection 2.5%
  • CVE-2020-37256 Medium 5.4 Grav - Cross-Site Scripting in Admin Plugin Page Editor 0.3%
  • CVE-2026-56701 Medium 6.5 Grav - XML External Entity Injection via SVG Upload 0.3%
  • CVE-2026-11982 Medium 5.1 Stored XSS via missing XSS safety check in Admin2 Pages API partial validation 0.4%
  • CVE-2026-7317 Medium 5.0 Grav CMS Cache Value FileCache.php doGet deserialization 0.2%