How many CVEs does e107 have?

e107 has 93 published CVE records since 2005, including 9 in the last two years.

How many e107 CVEs are in CISA KEV?

None of e107's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which e107 products have the most CVEs?

The e107 products with the most published CVEs are e107, e107 CMS, chatbox plugin, CMS, alternate profiles plugin.

What are the most common weakness types in e107 CVEs?

e107's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-502 (Deserialization of Untrusted Data).

Are there public exploits for e107 vulnerabilities?

Yes — 46 of e107's CVEs have a known public exploit.

How many critical e107 vulnerabilities are there?

e107 has 3 critical and 30 high-severity CVEs.

What is the average severity of e107 CVEs?

The average CVSS base score across e107's scored CVEs is 6.1.

RadicalNotion.AI

Log in Start free

93 CVEs

e107 Vulnerabilities

Name: e107 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for e107.

93

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

46

Public exploits

PoC or exploit code

6.1

Avg CVSS

2005–2026

Overview

e107 has 93 published CVE records since 2005, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 46 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting e107 products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on e107's vulnerability posture, as a share of its 93 published CVEs.

Average CVSS: 6.1
Critical / high: 35%
Actively exploited (KEV): 0%
Public exploit available: 49%
Patch available: 9%

Severity and exploitation

How the CVSS severity of e107's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High30

Medium59

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of e107's CVEs are currently listed in CISA's KEV catalog.

Public exploits

46

46 of e107's CVEs have a known public exploit available.

Most affected products

The e107 products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in e107 CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish e107 CVE records.

Disclosure activity by year

How many e107 CVEs were published each year.

2015

3

2017

2

2018

6

2019

3

2021

1

2023

3

2025

2

2026

7

Latest e107 CVEs

The most recently disclosed vulnerabilities affecting e107.

e107 e107 - SQL Injection
CWE-89
Critical · CVSS 9.8
EPSS 0.3%2026-08-11
e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload
CWE-434
High · CVSS 8.7
EPSS 0.6%2026-05-10
e107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File Override
CWE-434
High · CVSS 8.6
EPSS 1.1%2026-01-13
e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override
CWE-434
High · CVSS 8.7
EPSS 0.8%2026-01-13
e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE
CWE-434
High · CVSS 8.6
EPSS 1.1%2026-01-13
e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS
CWE-79
Medium · CVSS 4.8
EPSS 0.4%2026-01-13
e107 CMS v3.2.1 - Reflected XSS via Comment Flow
CWE-79
Critical · CVSS 9.8
EPSS 0.6%2026-01-13
e107 CMS Avatar image.php path traversal
CWE-22
Medium · CVSS 5.3
EPSS 0.9%2025-10-19
Medium vulnerability · 2025-10-10
CWE-502
Medium · CVSS 6.5
EPSS 0.3%2025-10-10
Medium vulnerability · 2023-09-28
Medium · CVSS 5.4
EPSS 0.5%2023-09-28
Medium vulnerability · 2023-09-28
CWE-79
Medium · CVSS 5.4
EPSS 0.6%2023-09-28
Medium vulnerability · 2023-08-01
Medium · CVSS 5.4
EPSS 1.2%2023-08-01

Track new e107 CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor e107 CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Mikrotik94 CVEs Belkin94 CVEs linecorp93 CVEs bdthemes93 CVEs BMC Software93 CVEs GL.iNet93 CVEs PHP-Fusion93 CVEs Silicon Labs93 CVEs

Browse all vendors

Frequently asked questions

Common questions about e107 vulnerabilities.

How many CVEs does e107 have?: e107 has 93 published CVE records since 2005, including 9 in the last two years.
How many e107 CVEs are in CISA KEV?: None of e107's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which e107 products have the most CVEs?: The e107 products with the most published CVEs are e107, e107 CMS, chatbox plugin, CMS, alternate profiles plugin.
What are the most common weakness types in e107 CVEs?: e107's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-502 (Deserialization of Untrusted Data).
Are there public exploits for e107 vulnerabilities?: Yes — 46 of e107's CVEs have a known public exploit.
How many critical e107 vulnerabilities are there?: e107 has 3 critical and 30 high-severity CVEs.
What is the average severity of e107 CVEs?: The average CVSS base score across e107's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track e107 vulnerabilities

Monitor new e107 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing