Sploitus

266 exploited vulnerabilities in Discourse

Showing 1–50 of 266

Vendors
Discourse, Codepen, Nginx, Redis
With known exploits
266
Affected Discourse versions
< 3.5.4, 2025.11.2, 2025.12.0, 2026.1.0, 3.4.4, 3.5.0, 3.3.3, 3.4.0, 2.8.9, 2.9.0, 2026.1.5, 2026.4.2, 2026.5.1, 2026.6.0, 2.8.10, 2.8.13, 3.0.0, 2026.1.2, 2026.2.1, 2026.3.0, 3.1.4, 3.2.0, 3.0.1, 3.4.6, 3.3.2, 3.1.1, 2.8.14, 2026.1.4, 2026.3.1, 2026.4.1, 2026.5.0, 2026.1.1, 2026.2.0, 3.3.1, 3.2.2, 3.3.0
Affected Discourse Patreon versions
< 2022-10-26

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2025-68662
CVSS 9.9 CRITICAL 2026-01-28FIX AVAILABLE
CVE-2025-48877
CVSS 9.8 CRITICAL 2025-06-09FIX AVAILABLE
CVE-2026-55674 1 exploit
CVSS 9.3 CRITICAL 2026-08-17FIX AVAILABLE
CVE-2024-49765
CVSS 9.1 CRITICAL 2024-12-19FIX AVAILABLE
CVE-2022-39355
CVSS 9.8 CRITICAL 2022-10-26FIX AVAILABLE
CVE-2022-36066
CVSS 9.1 CRITICAL 2022-09-29FIX AVAILABLE
CVE-2026-53963
CVSS 9.0 CRITICAL 2026-07-09FIX AVAILABLE
CVE-2022-39356
CVSS 8.9 HIGH 2022-11-02FIX AVAILABLE
CVE-2023-22468
CVSS 8.8 HIGH 2023-01-26FIX AVAILABLE
CVE-2026-72730
CVSS 8.7 HIGH 2026-08-10FIX AVAILABLE
CVE-2026-27934
CVSS 8.7 HIGH 2026-03-19FIX AVAILABLE
CVE-2025-48053
CVSS 8.7 HIGH 2025-06-09FIX AVAILABLE
CVE-2023-48297
CVSS 8.6 HIGH 2024-01-12FIX AVAILABLE
CVE-2023-23621
CVSS 8.6 HIGH 2023-01-16FIX AVAILABLE
CVE-2026-44787
CVSS 8.2 HIGH 2026-07-09FIX AVAILABLE
CVE-2026-31805
CVSS 8.2 HIGH 2026-03-20FIX AVAILABLE
CVE-2026-29072
CVSS 8.2 HIGH 2026-03-19FIX AVAILABLE
CVE-2025-53102
CVSS 9.8 CRITICAL 2025-07-29FIX AVAILABLE
CVE-2025-23023
CVSS 8.2 HIGH 2025-02-04FIX AVAILABLE
CVE-2024-55948
CVSS 8.2 HIGH 2025-02-04FIX AVAILABLE
CVE-2024-47773 2 exploits
CVSS 8.2 HIGH 2024-10-08FIX AVAILABLE
CVE-2024-45051
CVSS 8.2 HIGH 2024-10-07FIX AVAILABLE
CVE-2026-55420
CVSS 8.1 HIGH 2026-07-09FIX AVAILABLE
CVE-2025-48954
CVSS 8.1 HIGH 2025-06-25FIX AVAILABLE
CVE-2023-43659
CVSS 8.0 HIGH 2023-10-16FIX AVAILABLE
CVE-2023-22454
CVSS 8.0 HIGH 2023-01-05FIX AVAILABLE
CVE-2024-53991
CVSS 7.5 HIGH 2024-12-19FIX AVAILABLE
CVE-2022-39241
CVSS 7.6 HIGH 2022-11-02FIX AVAILABLE
CVE-2026-49256
CVSS 7.5 HIGH 2026-07-09FIX AVAILABLE
CVE-2026-45788
CVSS 7.5 HIGH 2026-07-09FIX AVAILABLE
CVE-2026-44786
CVSS 7.5 HIGH 2026-06-12FIX AVAILABLE
CVE-2026-33427
CVSS 7.5 HIGH 2026-03-20FIX AVAILABLE
CVE-2026-26265
CVSS 7.5 HIGH 2026-02-26FIX AVAILABLE
CVE-2026-26078
CVSS 7.5 HIGH 2026-02-26FIX AVAILABLE
CVE-2026-23743
CVSS 7.5 HIGH 2026-01-28FIX AVAILABLE
CVE-2025-49845
CVSS 7.5 HIGH 2025-06-25FIX AVAILABLE
CVE-2025-46813
CVSS 7.5 HIGH 2025-05-05FIX AVAILABLE
CVE-2024-43789
CVSS 7.5 HIGH 2024-10-07FIX AVAILABLE
CVE-2024-35227
CVSS 7.5 HIGH 2024-07-03FIX AVAILABLE
CVE-2024-28242
CVSS 7.5 HIGH 2024-03-15FIX AVAILABLE
CVE-2024-24827 1 exploit
CVSS 7.5 HIGH 2024-03-15FIX AVAILABLE
CVE-2023-47120
CVSS 7.5 HIGH 2023-11-10FIX AVAILABLE
CVE-2023-45131 2 exploits
CVSS 7.5 HIGH 2023-10-16FIX AVAILABLE
CVE-2023-44388
CVSS 7.5 HIGH 2023-10-16FIX AVAILABLE
CVE-2021-3138 4 exploits
CVSS 7.5 HIGH 2021-01-14
CVE-2026-55424
CVSS 7.4 HIGH 2026-07-09FIX AVAILABLE
CVE-2022-37458 1 exploit
CVSS 7.2 HIGH 2022-09-02FIX AVAILABLE
CVE-2022-36068
CVSS 7.2 HIGH 2022-09-29FIX AVAILABLE
CVE-2026-72731
CVSS 7.1 HIGH 2026-08-10FIX AVAILABLE
CVE-2025-69218
CVSS 7.1 HIGH 2026-01-28FIX AVAILABLE