Sploitus

32 exploited vulnerabilities in Craft

Vulnerabilities with publicly known exploits

Vendors
Craft, Pixel & Tonic, Craft Cms
With known exploits
32
Affected Craftcms Craft Cms versions
< 3.9.15, 4.14.15, 5.6.17, 4.17.0, 5.9.0, 4.0.0, 5.0.0, 4.16.17, 5.8.21, 4.12.2, 5.4.3, 4.16.18, 5.8.22, 4.16.3, 5.8.4, 4.13.8, 5.5.8, 4.12.8, 5.4.9, 4.16.6, 5.8.7, 3.8.15, 4.4.15, 4.3.7, 4.16.19, 5.8.23, 4.5.0, 4.4.6, 4.4.7, 3.9.6, 4.5.15, 2.7.10, 3.2.6, 4.17.4, 5.9.7, 3.8.6
Affected Craftercms versions
= 4.0.0

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2025-32432 31 exploits
CVSS 10.0 CRITICAL 2025-04-25FIX AVAILABLE
CVE-2026-28783
CVSS 9.4 CRITICAL 2026-03-03FIX AVAILABLE
CVE-2026-28697
CVSS 9.4 CRITICAL 2026-03-03FIX AVAILABLE
CVE-2025-68456
CVSS 9.1 CRITICAL 2026-01-04FIX AVAILABLE
CVE-2024-52293
CVSS 7.2 HIGH 2024-11-13FIX AVAILABLE
CVE-2026-25497
CVSS 8.8 HIGH 2026-02-09FIX AVAILABLE
CVE-2026-25495
CVSS 8.8 HIGH 2026-02-09FIX AVAILABLE
CVE-2025-68454
CVSS 8.8 HIGH 2026-01-05FIX AVAILABLE
CVE-2025-54417
CVSS 8.8 HIGH 2025-08-08FIX AVAILABLE
CVE-2026-28696
CVSS 8.7 HIGH 2026-03-03FIX AVAILABLE
CVE-2025-68455
CVSS 8.6 HIGH 2026-01-05FIX AVAILABLE
CVE-2025-23209 1 exploit
CVSS 8.1 HIGH 2025-01-18FIX AVAILABLE
CVE-2024-52292
CVSS 7.7 HIGH 2024-11-13FIX AVAILABLE
CVE-2025-57811
CVSS 8.6 HIGH 2025-08-25FIX AVAILABLE
CVE-2023-40035
CVSS 7.2 HIGH 2023-08-21FIX AVAILABLE
CVE-2026-28781
CVSS 7.1 HIGH 2026-03-03FIX AVAILABLE
CVE-2026-25494
CVSS 6.9 MEDIUM 2026-02-09FIX AVAILABLE
CVE-2026-25493
CVSS 6.9 MEDIUM 2026-02-09FIX AVAILABLE
CVE-2025-68437
CVSS 6.8 MEDIUM 2026-01-05FIX AVAILABLE
CVE-2025-68436
CVSS 7.1 HIGH 2026-01-05FIX AVAILABLE
CVE-2023-23927
CVSS 6.1 MEDIUM 2023-03-03FIX AVAILABLE
CVE-2026-27126
CVSS 5.9 MEDIUM 2026-02-23FIX AVAILABLE
CVE-2023-33197
CVSS 5.5 MEDIUM 2023-05-26FIX AVAILABLE
CVE-2023-33196
CVSS 5.5 MEDIUM 2023-05-26FIX AVAILABLE
CVE-2024-21622
CVSS 8.8 HIGH 2024-01-03FIX AVAILABLE
CVE-2026-28782
CVSS 5.3 MEDIUM 2026-03-03FIX AVAILABLE
CVE-2019-14280 4 exploits
CVSS 5.3 MEDIUM 2019-07-26FIX AVAILABLE
CVE-2023-33195
CVSS 6.1 MEDIUM 2023-05-26FIX AVAILABLE
CVE-2026-25496
CVSS 4.8 MEDIUM 2026-02-09FIX AVAILABLE
CVE-2026-25491
CVSS 4.8 MEDIUM 2026-02-09FIX AVAILABLE
CVE-2026-29113
CVSS 4.3 MEDIUM 2026-03-10FIX AVAILABLE
CVE-2023-33194
CVSS 4.8 MEDIUM 2023-05-26FIX AVAILABLE