Feed live

The CMS vulnerability ledger.

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

707

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1–14 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-9518	medium	5.3/10	hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting	May 26, 2026 1mo ago
CVE-2026-9517	medium	6.9/10	hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control	May 26, 2026 1mo ago
CVE-2025-54418	critical	9.8/10	CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability	Jul 28, 2025 11mo ago
CVE-2025-24013	medium	5.3/10	CodeIgniter validation of header name and value	Jan 20, 2025 1y ago
CVE-2024-29904	high	7.5/10	CodeIgniter4 Language class DoS Vulnerability	Mar 29, 2024 2y ago
CVE-2023-48707	medium	5.0/10	Cleartext Storage of Sensitive Information in codeigniter4/shield	Nov 24, 2023 2y ago
CVE-2023-48708	medium	5.0/10	Insertion of Sensitive Information into Log in codeigniter4/shield	Nov 24, 2023 2y ago
CVE-2023-46240	high	7.5/10	CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment	Oct 31, 2023 2y ago
CVE-2023-27580	high	7.5/10	CodeIgniter Shield Password Shucking Vulnerability	Mar 13, 2023 3y ago
CVE-2022-46170	high	8.6/10	CodeIgniter is vulnerable to improper authentication via Session Handlers	Dec 22, 2022 3y ago
CVE-2022-23556	high	7.0/10	CodeIgniter is vulnerable to IP address spoofing when using proxy	Dec 22, 2022 3y ago
CVE-2022-39284	low	2.6/10	Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4	Oct 6, 2022 3y ago
CVE-2022-21715	medium	5.4/10	Cross-site Scripting Vulnerability in CodeIgniter4	Jan 24, 2022 4y ago
CVE-2022-21647	high	7.7/10	Deserialization of Untrusted Data in Codeigniter4	Jan 4, 2022 4y ago