Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
getgrav

getgrav grav-plugin-admin vulnerabilities

3 published CVEs name getgrav grav-plugin-admin among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-44737

    grav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][title]

    getgrav · grav-plugin-admin

    Medium6.2
  • CVE-2021-29439

    Plugins can be installed with minimal admin privileges

    getgrav · grav-plugin-admin

    High7.2
  • CVE-2021-21425

    Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

    getgrav · grav-plugin-admin

    Critical9.3
All 3 in the list