ProcessMaker

Products

ProductCVEsExploitedLatest
ProcessMaker2–Oct 9, 2026

Exploited and recent CVEs

  • CVE-2026-107803 Medium 6.5 ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter 0.2%
  • CVE-2021-47978 Medium 6.2 ProcessMaker 3.5.4 Local File Inclusion via Path Traversal 0.8%