Sploitus

68 exploited vulnerabilities in Grav

Showing 1–50 of 68, highest-scoring first

Vendors
Grav, Twig, Grav Cms, Unknown, Packagist, Getgrav
With known exploits
68
Affected Getgrav Grav versions
< 1.7.42, 1.8.0, 2.0.0, 1.7.48, 1.7.43, 1.7.11

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2024-34082
CVSS 9.9 CRITICAL 2024-05-15FIX AVAILABLE
CVE-2023-34251
CVSS 9.9 CRITICAL 2023-06-14FIX AVAILABLE
CVE-2026-65008 1 exploit
CVSS 9.8 CRITICAL 2026-07-21FIX AVAILABLE
Exploit for CVE-2026-65008
CVE-2025-46199
CVSS 9.8 CRITICAL 2025-07-25FIX AVAILABLE
CVE-2025-66301 3 exploits
CVSS 9.6 CRITICAL 2025-12-01FIX AVAILABLE
📄 Grav CMS 1.7.49.5 Sandbox Bypass📄 Grav CMS Twig SSTI Authenticated Sandbox Bypass Remote Code Execution
CVE-2026-42613
CVSS 9.4 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2026-42608
CVSS 9.3 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2026-62232
CVSS 9.1 CRITICAL 2026-07-17FIX AVAILABLE
CVE-2026-42607 4 exploits
CVSS 9.1 CRITICAL 2026-05-05FIX AVAILABLE
📄 Grav CMS Zip Slip Remote Code Execution📄 Grav CMS Remote Code Execution
CVE-2025-66844
CVSS 9.1 CRITICAL 2025-12-15FIX AVAILABLE
CVE-2026-42611
CVSS 8.9 HIGH 2026-05-05FIX AVAILABLE
CVE-2026-65608
CVSS 8.8 HIGH 2026-07-23FIX AVAILABLE
CVE-2026-42844
CVSS 8.8 HIGH 2026-05-06FIX AVAILABLE
CVE-2025-66297
CVSS 8.8 HIGH 2025-12-01FIX AVAILABLE
CVE-2025-66296
CVSS 8.8 HIGH 2025-12-01FIX AVAILABLE
CVE-2025-66294 3 exploits
CVSS 8.8 HIGH 2025-12-01FIX AVAILABLE
📄 Grav CMS 1.7.49.5 Sandbox Bypass📄 Grav CMS Twig SSTI Authenticated Sandbox Bypass Remote Code Execution
CVE-2025-66295
CVSS 8.8 HIGH 2025-12-01FIX AVAILABLE
CVE-2025-46198
CVSS 8.8 HIGH 2025-07-25FIX AVAILABLE
CVE-2024-28119
CVSS 8.8 HIGH 2024-03-21FIX AVAILABLE
CVE-2024-28118
CVSS 8.8 HIGH 2024-03-21FIX AVAILABLE
CVE-2024-28117
CVSS 8.8 HIGH 2024-03-21FIX AVAILABLE
CVE-2024-27923
CVSS 8.8 HIGH 2024-03-06FIX AVAILABLE
CVE-2024-27921
CVSS 8.8 HIGH 2024-03-21FIX AVAILABLE
CVE-2023-34448
CVSS 8.8 HIGH 2023-06-14FIX AVAILABLE
CVE-2023-34253
CVSS 8.8 HIGH 2023-06-14FIX AVAILABLE
CVE-2023-34252
CVSS 8.8 HIGH 2023-06-14FIX AVAILABLE
CVE-2021-3924
CVSS 8.8 HIGH 2021-11-05
CVE-2026-62230
CVSS 8.7 HIGH 2026-07-17FIX AVAILABLE
CVE-2026-53653
CVSS 8.7 HIGH 2026-07-10FIX AVAILABLE
CVE-2025-66298
CVSS 8.7 HIGH 2025-12-01FIX AVAILABLE
CVE-2026-42612
CVSS 8.5 HIGH 2026-05-05FIX AVAILABLE
CVE-2025-66300
CVSS 8.5 HIGH 2025-12-01FIX AVAILABLE
CVE-2026-62234
CVSS 8.4 HIGH 2026-07-17FIX AVAILABLE
CVE-2021-29440 4 exploits
CVSS 8.4 HIGH 2021-04-13FIX AVAILABLE
Grav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated) ExploitGrav CMS 1.7.10 - Server-Side Template Injection (SSTI) (Authenticated)
CVE-2026-42609
CVSS 8.1 HIGH 2026-05-05FIX AVAILABLE
CVE-2026-44738
CVSS 7.7 HIGH 2026-05-11FIX AVAILABLE
CVE-2025-66304
CVSS 7.2 HIGH 2025-12-01FIX AVAILABLE
CVE-2023-37897
CVSS 7.2 HIGH 2023-07-18FIX AVAILABLE
CVE-2026-61449
CVSS 7.1 HIGH 2026-07-15FIX AVAILABLE
CVE-2026-61455
CVSS 7.1 HIGH 2026-07-10FIX AVAILABLE
CVE-2026-61450
CVSS 7.1 HIGH 2026-07-10FIX AVAILABLE
CVE-2026-56701
CVSS 7.1 HIGH 2026-05-05FIX AVAILABLE
CVE-2022-0970
CVSS 7.1 HIGH 2022-03-15FIX AVAILABLE
CVE-2026-59193
CVSS 6.9 MEDIUM 2026-07-10FIX AVAILABLE
CVE-2026-42841
CVSS 6.9 MEDIUM 2026-05-05FIX AVAILABLE
CVE-2025-66305
CVSS 6.9 MEDIUM 2025-12-01FIX AVAILABLE
CVE-2026-55885
CVSS 6.8 MEDIUM 2026-06-18FIX AVAILABLE
CVE-2025-66308
CVSS 6.8 MEDIUM 2025-12-01FIX AVAILABLE
CVE-2026-62237
CVSS 6.5 MEDIUM 2026-07-17FIX AVAILABLE
CVE-2026-42610
CVSS 6.5 MEDIUM 2026-05-05FIX AVAILABLE