unopim vulnerabilities
9 published CVEs name unopim among the affected products.
- 9Published CVEs9 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102630
UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host
unopim · unopim
Low2.3 - CVE-2026-85395
UnoPim before 2.1.3 Missing Authorization on Integration Management Routes
unopim · unopim
High7.1 - CVE-2026-82524
UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
unopim · unopim
High8.6 - CVE-2025-55745
UnoPim Quick Export feature is vulnerable to CSV injection
unopim · unopim
Low2.5 - CVE-2025-55741
unopim/unopim allows unauthorized product deletion via mass-delete endpoint
unopim · unopim
High8.1 - CVE-2025-55744
UnoPim vulnerable to CSRF on Product edit feature and creation of other types
unopim · unopim
Medium6.9 - CVE-2025-55743
UnoPim vulnerable to remote code execution through Arbitrary File upload
unopim · unopim
High7.3 - CVE-2025-55742
UnoPim Stored XSS via SVG MIME/Sanitizer Bypass
unopim · unopim
High8.0 - CVE-2024-52305
UnoPim Stored XSS : Cookie hijacking through Create User function
unopim · unopim
Medium6.5