Craft CMS

1 known vulnerability in Craft CMS, 1 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2025-35939 CVSS 6.9 medium · actively exploited Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

Latest vulnerabilities

  • CVE-2025-35939 CVSS 6.9 medium · actively exploited Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability