Craft CMS: known exploited vulnerabilities
4Catalog entries
0Ransomware use
2026-03-20Last added
2026-04-03Latest due date
Get an email when Craft CMS is next added.Watch Craft CMS
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2025-32432 | Craft CMS Craft CMS Code Injection Vulnerability |
2026-04-03 |
| CVE-2024-56145 | Craft CMS Craft CMS Code Injection Vulnerability |
2025-06-23 |
| CVE-2025-35939 | Craft CMS Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability |
2025-06-23 |
| CVE-2025-23209 | Craft CMS Craft CMS Code Injection Vulnerability |
2025-03-13 |