Products: 2
Vulnerabilities: 19
Known Exploited: 0
1
Critical Level Threats
7
High Level Threats
5
Medium Level Threats
5
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-63179
Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets
Last Modified: Aug 26, 2026
Published: Aug 26, 2026
CVE-2026-54256
Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata
Last Modified: Aug 27, 2026
Published: Aug 26, 2026
CVE-2026-32639
Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads
Last Modified: Aug 29, 2026
Published: Aug 26, 2026
CVE-2026-32593
Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax
Last Modified: Aug 26, 2026
Published: Aug 26, 2026
CVE-2026-32258
Winter: Stored XSS through Editor Settings custom styles
Last Modified: Aug 26, 2026
Published: Aug 26, 2026
Items Per Page
