Feed live

The CMS vulnerability ledger.

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

707

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-49742	high	7.1/10	TYPO3 CMS - Broken Access Control in Media Module	Jun 9, 2026 18d ago
CVE-2026-49741	high	8.7/10	TYPO3 CMS - Privilege Escalation & SQL Injection in Form Framework	Jun 9, 2026 18d ago
CVE-2026-49740	medium	6.3/10	TYPO3 CMS - Insecure Deserialization in Core API	Jun 9, 2026 18d ago
CVE-2026-49738	low	2.1/10	TYPO3 CMS - Broken Access Control in File Abstraction Layer	Jun 9, 2026 18d ago
CVE-2026-47352	medium	5.3/10	TYPO3 CMS - Broken Access Control in Backend API	Jun 9, 2026 18d ago
CVE-2026-47351	medium	5.3/10	TYPO3 CMS - Broken Access Control in Clipboard	Jun 9, 2026 18d ago
CVE-2026-47350	medium	5.3/10	TYPO3 CMS - Broken Access Control in DataHandler	Jun 9, 2026 18d ago
CVE-2026-47349	medium	5.3/10	TYPO3 CMS - Broken Access Control in Recycler	Jun 9, 2026 18d ago
CVE-2026-47348	medium	5.1/10	TYPO3 CMS - Cross-Site Scripting in Indexed Search	Jun 9, 2026 18d ago
CVE-2026-47347	medium	5.3/10	TYPO3 CMS - Open Redirect in Core Utilities	Jun 9, 2026 18d ago
CVE-2026-47346	high	7.6/10	TYPO3 CMS - Broken Access Control in Form Framework	Jun 9, 2026 18d ago
CVE-2026-47343	high	7.2/10	TYPO3 CMS - Destructive Actions on File Mount Folders	Jun 9, 2026 18d ago
CVE-2026-11607	high	7.6/10	TYPO3 CMS - Broken Access Control in Form Framework	Jun 9, 2026 18d ago
CVE-2026-47345	medium	5.1/10	TYPO3 HTML Sanitizer allows Cross-Site Scripting	Jun 8, 2026 18d ago
CVE-2026-47344	low	2.1/10	TYPO3 HTML Sanitizer allows Cross-Site Scripting	Jun 8, 2026 18d ago
CVE-2026-6553	high	7.3/10	TYPO3 CMS Stores Cleartext Password in User Settings Module	Apr 21, 2026 2mo ago
CVE-2026-0859	medium	5.2/10	TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool	Jan 13, 2026 5mo ago
CVE-2025-59022	high	7.1/10	TYPO3 CMS Allows Broken Access Control in Recycler Module	Jan 13, 2026 5mo ago
CVE-2025-59021	medium	5.3/10	TYPO3 CMS Allows Broken Access Control in Redirects Module	Jan 13, 2026 5mo ago
CVE-2025-59020	medium	5.3/10	TYPO3 CMS Allows Broken Access Control in Edit Document Controller	Jan 13, 2026 5mo ago
CVE-2025-59014	medium	5.1/10	Denial of Service in TYPO3 Bookmark Toolbar	Sep 9, 2025 9mo ago
CVE-2025-59013	medium	5.3/10	Open Redirect in TYPO3 CMS	Sep 9, 2025 9mo ago
CVE-2025-9573	high	8.6/10	Command Injection in extension "TYPO3 Backup Plus" (ns_backup)	Sep 2, 2025 9mo ago
CVE-2025-47941	high	7.2/10	TYPO3 Has Broken Authentication in Backend MFA	May 20, 2025 1y ago
CVE-2025-47940	high	7.2/10	TYPO3 CMS Vulnerable to Privilege Escalation to System Maintainer	May 20, 2025 1y ago
CVE-2025-47939	medium	5.4/10	TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer	May 20, 2025 1y ago
CVE-2025-47938	low	3.8/10	TYPO3 Vulnerable to Unverified Password Change for Backend Users	May 20, 2025 1y ago
CVE-2025-47937	low	3.7/10	TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling	May 20, 2025 1y ago
CVE-2025-47936	low	3.3/10	TYPO3 Vulnerable to Server Side Request Forgery via Webhooks	May 20, 2025 1y ago
CVE-2024-55892	medium	4.8/10	Potential Open Redirect via Parsing Differences in TYPO3	Jan 14, 2025 1y ago