craftcms vulnerabilities
175 published CVEs name craftcms among the affected products; CISA lists 3 of them as exploited in the wild.
- 175Published CVEs175 of them scored
- 154Last 12 monthspublished in the last year
- 12Critical83 more rated high
- 3Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2025-32432
Craft CMS Allows Remote Code Execution
craftcms · cms
ExploitedCritical10.0 - CVE-2024-56145
RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
craftcms · cms
ExploitedCritical9.3 - CVE-2025-23209
Potential RCE with a compromised security key in craft/cms
craftcms · cms
ExploitedHigh8.1