Skip to content
TTypemill
Products
| Product | CVEs | Exploited | Latest |
|---|
| Typemill | 6 | – | Aug 21, 2026 |
Exploited and recent CVEs
-
CVE-2026-53468
Medium 4.6
Typemill has Stored HTML Attribute Injection in Metadata Fields
0.4%
-
CVE-2026-71518
High 7.5
Typemill < 2.26.0 Authorization Bypass via Media File Download Route
0.5%
-
CVE-2026-44401
Medium 4.8
Typemill CMS 2.x Persistent XSS via Markdown javascript URI
0.3%
-
CVE-2026-71213
Critical 9.1
typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brute-Force
0.5%
-
CVE-2026-49133
Medium 6.5
Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()
0.3%
-
CVE-2026-24127
Medium 5.4
Typemill has Reflected XSS via login error view template
0.3%