Exposición de Grav

CMS
199
score de exposición
718
sitios usan
0
en explotación
18
críticos

CVEs

162 resultados
CVE-2026-42613CRITICALGrav: Privilege Escalation via Missing Server-Side Validation of groups/accessEPSS 1.1%CVE-2026-65608HIGHGrav before 2.0.9 Remote Code Execution via FlexDirectoryEPSS 1.1%CVE-2026-72819HIGHGrav CMS before 2.0.13 Remote Code Execution via ZIP UploadEPSS 0.9%CVE-2026-75827CRITICALGrav before 2.0.15 Arbitrary File Write via error_logEPSS 0.9%CVE-2026-85604HIGHGrav before 2.0.18 Remote Code Execution via sort filterEPSS 0.9%CVE-2026-72831HIGHGrav through 2.0.11 Authentication Bypass via Flex ObjectsEPSS 0.9%CVE-2026-72827HIGHGrav CMS before 2.0.13 Remote Code Execution via TwigEPSS 0.9%CVE-2025-66297HIGHGrav vulnerable to Privilege Escalation and Authenticated Remote Code Execution via Twig InjectionEPSS 0.8%CVE-2026-112782HIGHGrav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypass Denial of ServiceEPSS 0.8%CVE-2026-72830HIGHGrav API Plugin before 1.0.13 RCE via ConfigController scope bypassEPSS 0.7%CVE-2026-72824HIGHGrav before 1.0.13 API Key Scope Bypass via PagesControllerEPSS 0.7%CVE-2026-112780CRITICALGrav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@EPSS 0.7%CVE-2026-75574HIGHGrav before 4.2.2 Remote Code Execution via Email TwigEPSS 0.7%CVE-2025-66299HIGHSecurity Sandbox Bypass with SSTI (Server Side Template Injection) in the Grav CMSEPSS 0.7%CVE-2026-72695HIGHGrav before 2.0.16 Path Traversal via MediaUploadTrait deleteFileEPSS 0.6%CVE-2026-85603HIGHGrav Admin Plugin Path Traversal via Save As Language CodeEPSS 0.6%CVE-2026-112781HIGHGrav 2.0.0 before 2.2.2 Information Disclosure via Form config-*@ DirectivesEPSS 0.6%CVE-2026-61457MEDIUMGrav before 1.0.3 Remote Code Execution via File Upload Extension BypassEPSS 0.6%CVE-2026-42608HIGHGrav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.EPSS 0.6%CVE-2026-59193MEDIUMGrav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()EPSS 0.6%