How many CVEs does Tiki tikiwiki cms/groupware have?

Tiki tikiwiki cms/groupware has 75 published CVE records since 2005.

How many Tiki tikiwiki cms/groupware CVEs are in CISA KEV?

None of Tiki tikiwiki cms/groupware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Tiki tikiwiki cms/groupware vulnerabilities?

Yes — 39 of Tiki tikiwiki cms/groupware's CVEs have a known public exploit.

Which versions of Tiki tikiwiki cms/groupware are affected?

130 distinct Tiki tikiwiki cms/groupware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Tiki tikiwiki cms/groupware CVEs?

Tiki tikiwiki cms/groupware's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-20 (Improper Input Validation).

How many critical Tiki tikiwiki cms/groupware vulnerabilities are there?

Tiki tikiwiki cms/groupware has 5 critical and 27 high-severity CVEs.

What is the average severity of Tiki tikiwiki cms/groupware CVEs?

The average CVSS base score across Tiki tikiwiki cms/groupware's scored CVEs is 6.3.

Tiki tikiwiki cms/groupware Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Tiki tikiwiki cms/groupware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.6.1 <= v <= 1.6.118 CVEs
1.9.0 <= v <= 1.9.017 CVEs
1.9.2 <= v <= 1.9.216 CVEs
1.9.1 <= v <= 1.9.115 CVEs
1.9.4 <= v <= 1.9.414 CVEs
1.9.5 <= v <= 1.9.514 CVEs
1.9.3 <= v <= 1.9.313 CVEs
1.9.6 <= v <= 1.9.610 CVEs
1.9.7 <= v <= 1.9.710 CVEs
<= 1.8.16 CVEs
1.9.8 <= v <= 1.9.86 CVEs
<= 1.6.15 CVEs
15.2 <= v <= 15.25 CVEs
5.2 <= v <= 5.25 CVEs
<= 1.9.84 CVEs
12.0 <= v <= 12.04 CVEs
12.1 <= v <= 12.14 CVEs
12.2 <= v <= 12.24 CVEs
12.3 <= v <= 12.34 CVEs
12.4 <= v <= 12.44 CVEs
12.5 <= v <= 12.54 CVEs
12.6 <= v <= 12.64 CVEs
12.7 <= v <= 12.74 CVEs
12.8 <= v <= 12.84 CVEs
12.9 <= v <= 12.94 CVEs
15.0 <= v <= 15.04 CVEs
15.1 <= v <= 15.14 CVEs
16.0 <= v <= 16.04 CVEs
16.2 <= v <= 16.24 CVEs
3.0 <= v <= 3.04 CVEs
3.1 <= v <= 3.14 CVEs
3.2 <= v <= 3.24 CVEs
3.3 <= v <= 3.34 CVEs
3.4 <= v <= 3.44 CVEs
4.0 <= v <= 4.04 CVEs
4.1 <= v <= 4.14 CVEs
1.9.8.1 <= v <= 1.9.8.13 CVEs
15.3 <= v <= 15.33 CVEs
15.4 <= v <= 15.43 CVEs
16.1 <= v <= 16.13 CVEs
2.2 <= v <= 2.23 CVEs
<= 1.9.3.12 CVEs
<= 1.9.62 CVEs
<= 1.9.8.12 CVEs
<= 1.9.92 CVEs
10.0 <= v <= 10.02 CVEs
10.1 <= v <= 10.12 CVEs
10.2 <= v <= 10.22 CVEs
10.3 <= v <= 10.32 CVEs
11.0 <= v <= 11.02 CVEs
12.0 <= v < 12.142 CVEs
12.10 <= v <= 12.102 CVEs
12.11 <= v <= 12.112 CVEs
15.0 <= v < 15.72 CVEs
17.0 <= v <= 17.02 CVEs
18.0 <= v < 18.22 CVEs
21.4 <= v <= 21.42 CVEs
3.5 <= v <= 3.52 CVEs
4 <= v <= 42 CVEs
4.2 <= v <= 4.22 CVEs
5.0 <= v <= 5.02 CVEs
5.1 <= v <= 5.12 CVEs
5.3 <= v <= 5.32 CVEs
6.0 <= v <= 6.02 CVEs
6.1 <= v <= 6.12 CVEs
6.10 <= v <= 6.102 CVEs
6.11 <= v <= 6.112 CVEs
6.12 <= v <= 6.122 CVEs
6.2 <= v <= 6.22 CVEs
6.8 <= v <= 6.82 CVEs
6.9 <= v <= 6.92 CVEs
7.0 <= v <= 7.02 CVEs
7.1 <= v <= 7.12 CVEs
7.2 <= v <= 7.22 CVEs
8.0 <= v <= 8.02 CVEs
9.0 <= v <= 9.02 CVEs
9.1 <= v <= 9.12 CVEs
9.2 <= v <= 9.22 CVEs
9.3 <= v <= 9.32 CVEs
9.4 <= v <= 9.42 CVEs
9.5 <= v <= 9.52 CVEs
9.6 <= v <= 9.62 CVEs
< 1.8.51 CVE
< 17.21 CVE
< 181 CVE
< 6.71 CVE
< 8.41 CVE
<= 1.9.01 CVE
<= 1.9.11 CVE
<= 11.01 CVE
<= 12.4_lts1 CVE
<= 14.11 CVE
<= 15.11 CVE
<= 15.21 CVE
<= 20.01 CVE
<= 6.141 CVE
<= 6.31 CVE
<= 7.01 CVE
<= 8.11 CVE
<= 8.21 CVE
<= 9.10_lts1 CVE
1.9.10 <= v <= 1.9.101 CVE
1.9.11 <= v <= 1.9.111 CVE
1.9.3.1 <= v <= 1.9.3.11 CVE
1.9.3.2 <= v <= 1.9.3.21 CVE
1.9.9 <= v <= 1.9.91 CVE
12.0 <= v < 12.131 CVE
13.0 <= v <= 13.01 CVE
13.1 <= v <= 13.11 CVE
13.2 <= v <= 13.21 CVE
14.0 <= v <= 14.01 CVE
14.1 <= v <= 14.11 CVE
15.0 <= v < 15.61 CVE
17.0 <= v < 17.21 CVE
17.1 <= v <= 17.11 CVE
18.0 <= v <= 18.01 CVE
18.4 <= v <= 18.41 CVE
21.2 <= v <= 21.21 CVE
8.1 <= v <= 8.11 CVE
8.3 <= v <= 8.31 CVE

Fixed in

12.142 CVEs
15.72 CVEs
17.22 CVEs
18.22 CVEs
1.8.51 CVE
12.131 CVE
15.61 CVE
181 CVE
6.71 CVE
8.41 CVE

Find a version

75 CVEs

Sort

Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE
CVE-2025-34111
Public exploit
Patch
CWE-434
Critical · CVSS 9.3
EPSS 2.6% (85th pct)2025-07-15
Tiki Wiki CMS Authenticated Command Injection in Calendar Module
CVE-2025-34113
Public exploit
Patch
CWE-78
High · CVSS 8.7
EPSS 3.0% (87th pct)2025-07-15
Medium vulnerability · 2021-10-28
CVE-2021-36551
Public exploit
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (42th pct)2021-10-28
Medium vulnerability · 2021-10-28
CVE-2021-36550
Public exploit
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (42th pct)2021-10-28
High vulnerability · 2020-12-11
CVE-2020-29254
Public exploit
CWE-352
High · CVSS 8.8
EPSS 1.5% (74th pct)2020-12-11
Medium vulnerability · 2020-04-01
CVE-2020-8966
Patch
CWE-80
Medium · CVSS 6.5
EPSS 0.9% (58th pct)2020-04-01
Medium vulnerability · 2020-02-12
CVE-2013-6022CWE-79
Medium · CVSS 6.1
EPSS 1.4% (71th pct)2020-02-12
Medium vulnerability · 2020-01-15
CVE-2011-4336
Public exploit
CWE-79
Medium · CVSS 6.1
EPSS 7.7% (95th pct)2020-01-15
Critical vulnerability · 2019-10-28
CVE-2010-4239
Public exploit
CWE-20
Critical · CVSS 9.8
EPSS 13.4% (96th pct)2019-10-28
Medium vulnerability · 2019-10-28
CVE-2010-4240
Public exploit
CWE-79
Medium · CVSS 6.1
EPSS 1.2% (68th pct)2019-10-28
High vulnerability · 2019-10-28
CVE-2010-4241
Public exploit
CWE-352
High · CVSS 8.8
EPSS 0.8% (55th pct)2019-10-28
Medium vulnerability · 2019-08-22
CVE-2019-15314
Public exploit
CWE-79
Medium · CVSS 5.4
EPSS 0.9% (58th pct)2019-08-22
High vulnerability · 2019-01-15
CVE-2018-20719
Public exploit
Patch
CWE-89
High · CVSS 8.8
EPSS 1.0% (62th pct)2019-01-15
Medium vulnerability · 2018-08-13
CVE-2018-14850
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.7% (51th pct)2018-08-13
Medium vulnerability · 2018-08-13
CVE-2018-14849
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.7% (51th pct)2018-08-13
Medium vulnerability · 2018-03-09
CVE-2018-7290
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (42th pct)2018-03-09
Medium vulnerability · 2018-02-21
CVE-2018-7303
Public exploit
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (44th pct)2018-02-21
Medium vulnerability · 2018-02-16
CVE-2018-7188
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (43th pct)2018-02-16
Medium vulnerability · 2018-02-06
CVE-2016-7394CWE-79
Medium · CVSS 6.1
EPSS 0.6% (49th pct)2018-02-06
High vulnerability · 2017-09-29
CVE-2017-14925CWE-352
High · CVSS 8.0
EPSS 0.5% (42th pct)2017-09-29
High vulnerability · 2017-09-29
CVE-2017-14924CWE-352
High · CVSS 8.0
EPSS 0.5% (41th pct)2017-09-29
Medium vulnerability · 2017-06-26
CVE-2017-9145CWE-79
Medium · CVSS 6.1
EPSS 0.6% (50th pct)2017-06-26
Medium vulnerability · 2017-05-31
CVE-2017-9305
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.0% (61th pct)2017-05-31
High vulnerability · 2017-01-20
CVE-2016-10143CWE-200
High · CVSS 7.5
EPSS 1.8% (79th pct)2017-01-20
Medium vulnerability · 2016-12-23
CVE-2016-9889CWE-79
Medium · CVSS 6.1
EPSS 1.3% (69th pct)2016-12-23
High vulnerability · 2013-11-06
CVE-2013-4715CWE-89
High · CVSS 7.5
EPSS 1.9% (79th pct)2013-11-06
Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability
CVE-2013-4714
Patch
CWE-79
Medium · CVSS 4.7
EPSS 1.2% (66th pct)2013-11-06
Medium vulnerability · 2012-10-08
CVE-2012-5321
Public exploit
CWE-20
Medium · CVSS 5.8
EPSS 13.8% (96th pct)2012-10-08
Medium vulnerability · 2012-10-01
CVE-2011-4551
Public exploit
CWE-79
Medium · CVSS 4.3
EPSS 1.6% (76th pct)2012-10-01
Medium vulnerability · 2012-07-12
CVE-2012-3996
Public exploit
CWE-200
Medium · CVSS 5.0
EPSS 4.6% (92th pct)2012-07-12

Showing 30 of 75

Tiki tikiwiki cms/groupware Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Tiki products

Frequently asked questions

References

Track Tiki tikiwiki cms/groupware vulnerabilities