doramart

Products

ProductCVEsExploitedLatest
DoraCMS4–Nov 2, 2026

Exploited and recent CVEs

  • CVE-2026-120448 High 8.1 DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint 0.4%
  • CVE-2026-3795 Medium 6.3 doramart DoraCMS v1.js createFileBypath path traversal 0.7%
  • CVE-2026-3794 High 7.3 doramart DoraCMS Email API send improper authentication 0.7%
  • CVE-2026-25870 Medium 5.8 DoraCMS <= 3.1 UEditor Remote Image Fetch SSRF 0.3%