148 CVEs
4 in CISA KEV
craftcms Vulnerabilities
CVE security advisories and vulnerability history for craftcms.
148
Total CVEs
Published
4
In CISA KEV
Exploited in the wild
57
Public exploits
PoC or exploit code
6.6
Avg CVSS
2017–2026
Overview
craftcms has 148 published CVE records since 2017, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 57 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.
This page aggregates every publicly disclosed vulnerability (CVE) affecting craftcms products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.