Vulnerabilities in CraftCMS
168 resultsCVE-2026-27128MEDIUMCraft CMS's race condition in Token Service potentially allows for token usage greater than the token limitEPSS 0.2%CVE-2026-109307LOWCraft CMS 5.0.0 before 5.10.14 DOM XSS via returnUrl in 2FA VerificationEPSS 0.2%CVE-2026-56381MEDIUMCraft CMS - Stored XSS via User Group Name in User Permissions PageEPSS 0.2%CVE-2026-115937HIGHUnauthenticated payment reuse allows unpaid orders to be marked as paidEPSS 0.2%CVE-2026-123491HIGHCraft CMS 4.0.0 before 4.18.9 Unauthenticated SQL Injection via GraphQL Eager-Load SelectEPSS —CVE-2026-123488CRITICALCraft CMS 4.0.0 before 4.18.9 SQL Injection via Element Search EndpointEPSS —CVE-2026-123489HIGHCraft CMS 4.0.0 before 4.18.9 Blind SQL Injection via getNext/getPrev CriteriaEPSS —CVE-2026-123490HIGHCraft CMS before 5.11.2 Privilege Escalation via getOwners() Sandbox BypassEPSS —