Craft CMS
Craft CMS known exploited vulnerabilities
Every Craft CMS vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first.
4 CVEs
- CVE-2025-32432Craft CMS Code Injection Vulnerability · added March 20, 2026
- CVE-2025-35939Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability · added June 2, 2025
- CVE-2024-56145Craft CMS Code Injection Vulnerability · added June 2, 2025
- CVE-2025-23209Craft CMS Code Injection Vulnerability · added February 20, 2025
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).