Craft CMS
CVEs currently on EVULNABLE's Priority Feed for Craft CMS, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 4 Craft CMS CVEs in EVULNABLE's ranked feed.
#1 90 Immediate CVE-2025-32432 ExigentCISA federal deadline · Overdue by 6 monthsCISA KEV Craft CMS — Craft CMS Code Injection Vulnerability KEV, EPSS 99.8%
EVRS 90/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#2 87 Immediate CVE-2024-56145 ExigentKEV since 2025 · listed over a yearCISA KEV Craft CMS — Craft CMS Code Injection Vulnerability KEV, EPSS 97.4%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.974.
#3 75 Urgent CVE-2025-23209 KEV since 2025 · listed over a yearCISA KEV Craft CMS — Craft CMS Code Injection Vulnerability KEV, EPSS 21.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.218.
#4 75 Urgent CVE-2025-35939 KEV since 2025 · listed over a yearCISA KEV Craft CMS — Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability KEV, EPSS 1.3%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.013.