Payload CMS

Products

ProductCVEsExploitedLatest
Payload2–Aug 29, 2025

Exploited and recent CVEs

  • CVE-2025-4644 Medium 5.3 User Session Fixation after Account Removal in PayloadCMS 0.4%
  • CVE-2025-4643 Medium 6.3 Lack of JWT Expiration after Log Out in PayloadCMS 0.4%