Feed live

django CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,282

All time

Critical · Active

11,988

CVSS ≥ 9.0

New · 14 days

2,739

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-54624	medium	6.5/10	django CMS: Structure endpoint bypasses page-view permission	Aug 20, 2026 4d ago
CVE-2026-54625	medium	4.8/10	django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)	Aug 20, 2026 4d ago
CVE-2026-68923	medium	6.5/10	MobSF: CSRF checks not enforced after Django migration	Aug 18, 2026 6d ago
CVE-2026-73531	medium	5.3/10	django-helpdesk < 2.3.3 Stored XSS via HTML Attachments	Aug 13, 2026 11d ago
CVE-2026-71240	medium	4.3/10	DjangoCRM - Unauthenticated Open Redirect via toggle_default_sorting next_url Parameter	Aug 5, 2026 19d ago
CVE-2026-71239	high	8.1/10	DjangoCRM - Server-Side Template Injection in Mass Mail Message Rendering	Aug 5, 2026 19d ago
CVE-2026-71238	critical	9.1/10	DjangoCRM - Hardcoded Django SECRET_KEY Enables Session and CSRF Token Forgery	Aug 5, 2026 19d ago
CVE-2026-18818	medium	5.3/10	Ehco1996 django-sspanel Support Ticket views.py TicketDetailView authorization	Aug 4, 2026 20d ago
CVE-2026-16216	medium	5.3/10	geex-arts django-jet OAuth cross-site request forgery	Jul 19, 2026 1mo ago
CVE-2026-16215	medium	6.9/10	geex-arts django-jet OAuth Credential Revoke authorization	Jul 19, 2026 1mo ago
CVE-2026-16213	medium	4.8/10	Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage	Jul 19, 2026 1mo ago
CVE-2026-16208	low	2.3/10	django-tastypie throttle.py CacheDBThrottle race condition	Jul 19, 2026 1mo ago
CVE-2026-16207	medium	6.3/10	django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings	Jul 19, 2026 1mo ago
CVE-2026-15188	medium	5.3/10	manjurulhoque django-job-portal Employee Dashboard Endpoint views.py EditEmployeeProfileAPIView access control	Jul 9, 2026 1mo ago
CVE-2026-6873	low	3.1/10	Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie	Jun 3, 2026 2mo ago
CVE-2026-42196	critical	9.9/10	django-s3file: Relative path traversal	May 12, 2026 3mo ago
CVE-2026-6611	low	2.3/10	liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key	Apr 20, 2026 4mo ago
CVE-2026-6610	medium	6.3/10	liangliangyy DjangoBlog Setting settings.py hard-coded credentials	Apr 20, 2026 4mo ago
CVE-2026-6609	medium	5.3/10	liangliangyy DjangoBlog views.py form_valid improper authorization	Apr 20, 2026 4mo ago
CVE-2026-6580	medium	6.9/10	liangliangyy DjangoBlog Amap API Call views.py hard-coded key	Apr 19, 2026 4mo ago
CVE-2026-6579	medium	6.9/10	liangliangyy DjangoBlog Clean Endpoint views.py missing authentication	Apr 19, 2026 4mo ago
CVE-2026-6578	medium	6.3/10	liangliangyy DjangoBlog Setting settings.py hard-coded credentials	Apr 19, 2026 4mo ago
CVE-2026-6577	medium	6.9/10	liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication	Apr 19, 2026 4mo ago
CVE-2026-6576	medium	5.3/10	liangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injection	Apr 19, 2026 4mo ago
CVE-2026-40316	high	8.8/10	OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow	Apr 15, 2026 4mo ago
CVE-2026-31815	medium	5.3/10	django-unicorn affected by component state manipulation via unvalidated attribute access	Mar 10, 2026 5mo ago
CVE-2026-1285	—	—	Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods	Feb 3, 2026 6mo ago
CVE-2025-61783	medium	6.3/10	Python Social Auth - Django has unsafe account association	Oct 9, 2025 10mo ago
CVE-2025-7738	medium	4.4/10	Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap	Jul 31, 2025 1y ago
CVE-2025-48383	high	8.2/10	Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking	May 27, 2025 1y ago