wintercms winter

7 known vulnerabilities in wintercms winter, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-63179 CVSS 4.9 medium Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated…
  • CVE-2026-54256 CVSS 5.4 medium Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend…
  • CVE-2026-32639 CVSS 6.8 medium Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's…
  • CVE-2026-32593 CVSS 5.9 medium Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter…
  • CVE-2026-35445 CVSS 7.1 high Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate…
  • CVE-2026-32258 CVSS 8.1 high Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.2.12…
  • CVE-2026-32257 CVSS 8.1 high Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied…