getgrav grav-plugin-flex-objects vulnerabilities

2 published CVEs name getgrav grav-plugin-flex-objects among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-114659
Grav Flex Objects 1.4.0 before 1.4.17 Authorization Bypass via Pages API Routes
getgrav · grav-plugin-flex-objects
High7.1
CVE-2026-62670
Fail-open authorization in grav-plugin-flex-objects admin-next API: api.access user gets full CRUD on permission-less directories (requireFlexPermission missing else-deny)
getgrav · grav-plugin-flex-objects
Medium6.3

Most common weaknesses