Craft CMS
4 vulnerabilities in Craft CMS products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2025-32432 | Craft CMS | Craft CMS | Craft CMS Code Injection Vulnerability | 20 Mar 2026 | 3 Apr 2026 | Unknown |
| CVE-2024-56145 | Craft CMS | Craft CMS | Craft CMS Code Injection Vulnerability | 2 Jun 2025 | 23 Jun 2025 | Unknown |
| CVE-2025-35939 | Craft CMS | Craft CMS | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability | 2 Jun 2025 | 23 Jun 2025 | Unknown |
| CVE-2025-23209 | Craft CMS | Craft CMS | Craft CMS Code Injection Vulnerability | 20 Feb 2025 | 13 Mar 2025 | Unknown |