Croogo

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 14
    Known Exploited: 0
    1
    Critical Level Threats
    1
    High Level Threats
    12
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-16219

    Croogo CMS Admin File Manager FileManager.php isEditable path traversal

    Last Modified: Jul 20, 2026
    Published: Jul 19, 2026

    CVE-2024-42718

    A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter.

    Last Modified: Dec 31, 2025
    Published: Dec 26, 2025

    CVE-2024-29643

    An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.

    Last Modified: May 28, 2025
    Published: Apr 18, 2025

    CVE-2024-6647

    Croogo Setting Theme unrestricted upload

    Last Modified: Apr 15, 2026
    Published: Jul 10, 2024

    CVE-2021-44673

    A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script.

    Last Modified: Nov 21, 2024
    Published: Mar 10, 2022
    Items Per Page