Log in Start free

xwikisas

Products

ProductCVEsExploitedLatest
xwiki-pro-macros8–Oct 28, 2026
macro-pdfviewer4–Nov 13, 2024
application-confluence-migrator-pro2–Mar 7, 2025
application-admintools1–Nov 18, 2025
identity-oauth1–Oct 16, 2023
application-urlshortener1–May 30, 2025
application-collabora1–Nov 9, 2023
application-licensing1–Feb 21, 2024

Exploited and recent CVEs

  • CVE-2026-44179 Critical 9.9 XWiki Pro Macros: excerpt-include title and content injection executes code 0.7%
  • CVE-2025-65036 High 8.3 XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macro 0.4%
  • CVE-2025-65089 Medium 6.8 XWiki view file macro: User can view content of office file without view rights on the attachment 0.3%
  • CVE-2025-54990 Medium 5.3 XWiki AdminTools application doesn't set permissions on the AdminTools space 0.2%
  • CVE-2025-55730 Critical 10.0 XWiki Remote Macros vulnerable to remote code execution using the confluence paste code macro 0.7%
  • CVE-2025-55729 Critical 10.0 XWiki Remote Macros vulnerable to remote code execution using the ConfluenceLayoutSection macro 0.7%
  • CVE-2025-55728 Critical 10.0 XWiki Remote Macros vulnerable to remote code execution using the panel macro 0.8%
  • CVE-2025-55727 Critical 10.0 XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro 1.0%
  • CVE-2025-48885 Medium 5.7 application-urlshortener users can create arbitrary pages as long as they have view access to them 0.2%
  • CVE-2025-27604 High 7.5 XWiki Confluence Migrator Pro's homepage is public 0.4%
  • CVE-2025-27603 Critical 9.1 XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations 0.7%
  • CVE-2024-52298 High 7.5 macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author 0.7%
  • CVE-2024-52299 High 7.5 The PDF viewer macro allows accessing any attachment without access right checks 0.5%
  • CVE-2024-52300 Critical 9.1 macro-pdfviewer has a XSS through the width parameter 0.5%
  • CVE-2024-42489 Critical 10.0 Pro Macros Remote Code Execution via Viewpdf and similar macros 1.1%
  • CVE-2024-30263 High 7.7 The PDF Viewer macro can be used to view PDF attachments with restricted access 0.5%
  • CVE-2024-26138 Medium 5.3 License information is public, exposing instance id and license holder details 0.5%
  • CVE-2023-46743 High 7.4 The same file cannot be opened with different rights 0.5%
  • CVE-2023-45144 Critical 10.0 Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App 1.2%