Products: 1
Vulnerabilities: 13
Known Exploited: 0
3
Critical Level Threats
6
High Level Threats
4
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-19264
Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover
Last Modified: Aug 07, 2026
Published: Aug 07, 2026
CVE-2026-19127
Insufficient verification of lifetime-deal redemption codes allows forgery of permanent paid subscriptions
Last Modified: Aug 07, 2026
Published: Aug 06, 2026
CVE-2026-48799
Postiz: Unauthenticated arbitrary lifetime PRO grant via Nowpayments webhook
Last Modified: Jul 15, 2026
Published: Jul 15, 2026
CVE-2026-48783
Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscription
Last Modified: Jun 17, 2026
Published: Jun 16, 2026
CVE-2026-48781
Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery
Last Modified: Jun 18, 2026
Published: Jun 16, 2026
Items Per Page
