Security Digest
Craft CMS: known exploited vulnerabilities
4 Craft CMS CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-03-20 | CVE-2025-32432 | Craft CMS Craft CMS Craft CMS Code Injection Vulnerability | 2026-04-03 |
| 2025-06-02 | CVE-2025-35939 | Craft CMS Craft CMS Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability | 2025-06-23 |
| 2025-06-02 | CVE-2024-56145 | Craft CMS Craft CMS Craft CMS Code Injection Vulnerability | 2025-06-23 |
| 2025-02-20 | CVE-2025-23209 | Craft CMS Craft CMS Craft CMS Code Injection Vulnerability | 2025-03-13 |