Vulnerabilidades en spip
34 resultadosCVE-2024-8517CRITICALSPIP Bigup Multipart File Upload OS Command InjectionEPSS 94.5%CVE-2024-7954CRITICALSPIP porte_plume Plugin Arbitrary PHP ExecutionEPSS 90.1%CVE-2025-71243CRITICALSPIP Saisies Plugin < 5.11.1 Remote Code ExecutionEPSS 5.6%CVE-2026-77806CRITICALSPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is relatEPSS 4.5%CVE-2026-77647CRITICALSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is relatEPSS 2.3%CVE-2026-72710CRITICALSPIP < 4.4.18 RCE via editer_objet.php Job Queue InjectionEPSS 1.1%CVE-2026-27744CRITICALSPIP tickets < 4.3.3 Unauthenticated RCEEPSS 1.0%CVE-2026-27475CRITICALSPIP < 4.4.9 Insecure DeserializationEPSS 0.9%CVE-2026-27745HIGHSPIP interface_traduction_objets < 2.2.2 Authenticated RCEEPSS 0.9%CVE-2026-27743CRITICALSPIP referer_spam < 1.3.0 Unauthenticated SQL InjectionEPSS 0.7%CVE-2026-72709CRITICALSPIP < 4.4.18 Missing Authorization via ecrire/action/EPSS 0.7%CVE-2026-22206HIGHSPIP < 4.4.10 SQL Injection RCE via Union & PHP TagsEPSS 0.6%CVE-2026-66738HIGHSPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLiteEPSS 0.6%CVE-2026-104070CRITICALSPIP Crayons Plugin < 3.5.0 Authorization Bypass RCEEPSS 0.6%CVE-2026-22205HIGHSPIP < 4.4.10 Authentication Bypass via PHP Type JugglingEPSS 0.5%CVE-2026-72708HIGHSPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.htmlEPSS 0.5%CVE-2026-8429HIGHSPIP < 4.4.14 Remote Code Execution via Private SpaceEPSS 0.5%CVE-2025-71242MEDIUMSPIP < 4.3.6 Authorization Bypass Leading to Content DisclosureEPSS 0.4%CVE-2026-8430CRITICALSPIP < 4.4.14 Remote Code Execution via nginxEPSS 0.4%CVE-2026-27747HIGHSPIP interface_traduction_objets < 2.2.2 Authenticated SQL InjectionEPSS 0.4%