How many getgrav grav-plugin-admin2 CVEs are in CISA KEV?

None of getgrav grav-plugin-admin2's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of getgrav grav-plugin-admin2 are affected?

3 distinct getgrav grav-plugin-admin2 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in getgrav grav-plugin-admin2 CVEs?

getgrav grav-plugin-admin2's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization).

What is the average severity of getgrav grav-plugin-admin2 CVEs?

The average CVSS base score across getgrav grav-plugin-admin2's scored CVEs is 6.9.

getgrav grav-plugin-admin2 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: getgrav grav-plugin-admin2 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

getgrav grav-plugin-admin2 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

getgrav grav-plugin-admin2 has 2 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

Severity and exploitation

How the CVSS severity of getgrav grav-plugin-admin2's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of getgrav grav-plugin-admin2's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2 of getgrav grav-plugin-admin2's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every getgrav grav-plugin-admin2 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.0.191 CVE
>= 2.0.211 CVE

Fixed in

2.0.211 CVE

Find a version

2 CVEs

Sort

Grav Admin before 2.0.21 Stored XSS via username
CVE-2026-85600
Public exploit
Patch
CWE-79
Medium · CVSS 5.1
EPSS 0.2% (13th pct)2026-09-04
Grav through 2.0.11 Authentication Bypass via Flex Objects
CVE-2026-72831
Public exploit
Patch
CWE-863
High · CVSS 8.7
EPSS 0.6% (46th pct)2026-08-14

Common weakness types

The CWE weakness categories most often found in getgrav grav-plugin-admin2 CVEs. Follow any weakness for its full explanation.

Other getgrav products

Browse vulnerabilities for other products by getgrav.

grav205 CVEs getgrav/grav96 CVEs grav-plugin-api20 CVEs grav-plugin-admin15 CVEs grav-plugin-login9 CVEs grav cms7 CVEs grav-plugin-form5 CVEs getgrav/grav-plugin-admin2 CVEs

Frequently asked questions

Common questions about getgrav grav-plugin-admin2 vulnerabilities.

How many CVEs does getgrav grav-plugin-admin2 have?: getgrav grav-plugin-admin2 has 2 published CVE records since 2026.
How many getgrav grav-plugin-admin2 CVEs are in CISA KEV?: None of getgrav grav-plugin-admin2's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for getgrav grav-plugin-admin2 vulnerabilities?: Yes — 2 of getgrav grav-plugin-admin2's CVEs have a known public exploit.
Which versions of getgrav grav-plugin-admin2 are affected?: 3 distinct getgrav grav-plugin-admin2 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in getgrav grav-plugin-admin2 CVEs?: getgrav grav-plugin-admin2's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization).
What is the average severity of getgrav grav-plugin-admin2 CVEs?: The average CVSS base score across getgrav grav-plugin-admin2's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track getgrav grav-plugin-admin2 vulnerabilities

Get an alert for each new getgrav grav-plugin-admin2 CVE, with AI-written analysis and remediation steps.

Create an account See pricing