CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 24/01/2024 |
| CVE-2022-40488 | MEDIUM6.5 | ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF). | 31/10/2022 |
| CVE-2022-40487 | MEDIUM6.1 | ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload. | 31/10/2022 |
| CVE-2020-27467 | HIGH7.5 | A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php. | 24/02/2022 |