EE107

Products

Exploited and recent CVEs

• CVE-2026-72599 Critical 9.8 e107 e107 - SQL Injection 0.6%
• CVE-2021-47937 High 8.8 e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload 0.6%
• CVE-2022-50939 High 7.2 e107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File Override 1.3%
• CVE-2022-50916 High 7.2 e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override 1.0%
• CVE-2022-50907 High 7.2 e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE 1.2%
• CVE-2022-50906 Medium 4.8 e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS 0.4%
• CVE-2022-50905 Medium 6.1 e107 CMS v3.2.1 - Reflected XSS via Comment Flow 0.7%
• CVE-2025-11941 Medium 5.4 e107 CMS Avatar image.php path traversal 0.9%