Home / Vendors / Craft CMS
Vendor Profile

Craft CMS Vulnerabilities

Known Exploited Vulnerabilities catalog entries for Craft CMS products.

3
CVE Total
1
Critical
0
Ransomware
CVE-2024-56145 CRITICAL

Craft CMS Code Injection Vulnerability

Craft CMS Craft CMS
CVSS 9.8
Added Jun 02
CVE-2025-35939 MEDIUM

Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

Craft CMS Craft CMS
CVSS 5.3
Added Jun 02
CVE-2025-23209 HIGH

Craft CMS Code Injection Vulnerability

Craft CMS Craft CMS
CVSS 8.1
Added Feb 20