5 CVEs

1 in CISA KEV

livewire Vulnerabilities

CVE security advisories and vulnerability history for livewire.

5

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

3

Public exploits

With known exploit

8.2

Avg CVSS

2024–2025

Overview

livewire has 5 published CVE records since 2024, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting livewire products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Severity and exploitation

How the CVSS severity of livewire's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of livewire's CVEs is confirmed exploited in the wild.

Public exploits

3

3 of livewire's CVEs have a known public exploit available.

Most affected products

The livewire products with the most published CVEs.

livewire4 CVEs
livewire/livewire4 CVEs
livewire/volt1 CVEs
volt1 CVEs

Common weakness types

The CWE weakness categories most often found in livewire CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish livewire CVE records.

Disclosure activity by year

How many livewire CVEs were published each year.

2024

3

2025

2

Latest livewire CVEs

The most recently disclosed vulnerabilities affecting livewire.

Livewire vulnerable to remote command execution during property update hydration
CISA KEV
CWE-94
Critical · CVSS 9.2
EPSS 58.9%2025-07-17
Volt Allows RCE Via User-Crafted Requests
CWE-20
Critical · CVSS 9.3
EPSS 1.5%2025-03-05
High vulnerability · 2024-10-08
CWE-20
High · CVSS 7.7
EPSS 0.2%2024-10-08
Medium vulnerability · 2024-03-19
CWE-79
Medium · CVSS 6.1
EPSS 0.2%2024-03-19
High vulnerability · 2024-02-01
CWE-352
High · CVSS 8.8
EPSS 1.6%2024-02-01

Track new livewire CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor livewire CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft24,097 CVEs Linux19,131 CVEs google14,281 CVEs apple14,019 CVEs oracle10,440 CVEs debian10,201 CVEs IBM8,265 CVEs Adobe7,222 CVEs

Browse all vendors

Frequently asked questions

Common questions about livewire vulnerabilities.

How many CVEs does livewire have?

livewire has 5 published CVE records since 2024, including 2 in the last two years.

How many livewire CVEs are in CISA KEV?

Yes — 1 of livewire's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which livewire products have the most CVEs?

The livewire products with the most published CVEs are livewire, livewire/livewire, livewire/volt, volt.

What are the most common weakness types in livewire CVEs?

livewire's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

Are there public exploits for livewire vulnerabilities?

Yes — 3 of livewire's CVEs have a known public exploit.

How many critical livewire vulnerabilities are there?

livewire has 2 critical and 2 high-severity CVEs.

What is the average severity of livewire CVEs?

The average CVSS base score across livewire's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track livewire vulnerabilities

Monitor new livewire vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing