Sploitus

122 exploited vulnerabilities in Pimcore

Showing 1–50 of 122, highest-scoring first

Vendors
Pimcore, Apache, Php, Zend, Git, Packagist
With known exploits
122
Affected Pimcore versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2022-39365
CVSS 9.8 CRITICAL 2022-10-27FIX AVAILABLE
CVE-2023-3820
CVSS 9.0 HIGH 2023-07-21FIX AVAILABLE
CVE-2014-2921 2 exploits
CVSS 8.9 HIGH 2014-04-21
Pimcore CMS 1.4.9 2.1.0 - Multiple VulnerabilitiesPimcore CMS 1.4.9 <2.1.0 - Multiple Vulnerabilities
CVE-2026-55207
CVSS 8.8 HIGH 2026-07-09FIX AVAILABLE
CVE-2026-23492
CVSS 8.8 HIGH 2026-01-14FIX AVAILABLE
CVE-2025-27617
CVSS 8.8 HIGH 2025-03-11FIX AVAILABLE
CVE-2023-47637
CVSS 8.8 HIGH 2023-11-15FIX AVAILABLE
CVE-2023-30850
CVSS 8.8 HIGH 2023-04-27FIX AVAILABLE
CVE-2023-30849
CVSS 8.8 HIGH 2023-04-27FIX AVAILABLE
CVE-2023-30848
CVSS 8.8 HIGH 2023-04-27FIX AVAILABLE
CVE-2023-25240
CVSS 8.8 HIGH 2023-02-13FIX AVAILABLE
CVE-2023-2338
CVSS 8.8 HIGH 2023-04-27FIX AVAILABLE
CVE-2022-1339
CVSS 8.8 HIGH 2022-04-13FIX AVAILABLE
CVE-2021-23405
CVSS 8.8 HIGH 2021-07-09FIX AVAILABLE
CVE-2019-10867 4 exploits
CVSS 8.8 HIGH 2019-04-04FIX AVAILABLE
Pimcore < 5.71 - Unserialize Remote Code Execution (Metasploit)Pimcore < 5.71 Unserialize Remote Code Execution Exploit
CVE-2018-14057 4 exploits
CVSS 8.8 HIGH 2018-08-17FIX AVAILABLE
Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery VulnerabilitiesPimcore 5.2.3 - SQL Injection Cross-Site Scripting Cross-Site Request Forgery
CVE-2026-44739
CVSS 8.7 HIGH 2026-05-27FIX AVAILABLE
CVE-2024-49370
CVSS 8.7 HIGH 2024-10-23FIX AVAILABLE
CVE-2026-23493
CVSS 8.6 HIGH 2026-01-15FIX AVAILABLE
CVE-2024-11954 1 exploit
CVSS 8.5 HIGH 2025-01-28FIX AVAILABLE
Pimcore 11.4.2 - Stored cross site scripting
CVE-2022-0258
CVSS 8.3 HIGH 2022-01-17
CVE-2023-23937
CVSS 8.2 HIGH 2023-02-02FIX AVAILABLE
CVE-2022-0894
CVSS 8.2 HIGH 2022-03-15FIX AVAILABLE
CVE-2026-45260
CVSS 8.1 HIGH 2026-05-27FIX AVAILABLE
CVE-2022-0251
CVSS 8.1 HIGH 2022-01-26FIX AVAILABLE
CVE-2026-45162
CVSS 8.0 HIGH 2026-05-27FIX AVAILABLE
CVE-2021-39170
CVSS 8.0 HIGH 2021-09-01FIX AVAILABLE
CVE-2023-28108
CVSS 7.9 HIGH 2023-03-16FIX AVAILABLE
CVE-2023-3819
CVSS 7.6 HIGH 2023-07-21FIX AVAILABLE
CVE-2023-1115
CVSS 7.6 HIGH 2023-03-01FIX AVAILABLE
CVE-2022-0565
CVSS 7.6 HIGH 2022-02-12FIX AVAILABLE
CVE-2024-32871
CVSS 7.5 HIGH 2024-06-04FIX AVAILABLE
CVE-2022-31092
CVSS 7.5 HIGH 2022-06-22FIX AVAILABLE
CVE-2022-1429
CVSS 7.5 HIGH 2022-04-22FIX AVAILABLE
CVE-2022-1219
CVSS 7.5 HIGH 2022-04-08FIX AVAILABLE
CVE-2015-4426 1 exploit
CVSS 7.5 HIGH 2015-08-18FIX AVAILABLE
Pimcore CMS Build 3450 SQL Injection
CVE-2021-4084
CVSS 7.4 HIGH 2021-12-10
CVE-2023-2341
CVSS 7.3 HIGH 2023-04-27FIX AVAILABLE
CVE-2023-3673
CVSS 7.2 HIGH 2023-07-14FIX AVAILABLE
CVE-2026-55212
CVSS 7.1 HIGH 2026-07-09FIX AVAILABLE
CVE-2026-45704
CVSS 7.1 HIGH 2026-05-27FIX AVAILABLE
CVE-2021-23340
CVSS 7.1 HIGH 2021-02-18FIX AVAILABLE
CVE-2026-5394
CVSS 7.0 HIGH 2026-04-27
CVE-2026-27461
CVSS 6.9 MEDIUM 2026-02-24FIX AVAILABLE
CVE-2023-2616
CVSS 6.8 MEDIUM 2023-05-10FIX AVAILABLE
CVE-2023-2615
CVSS 6.8 MEDIUM 2023-05-10FIX AVAILABLE
CVE-2023-2614
CVSS 6.8 MEDIUM 2023-05-10FIX AVAILABLE
CVE-2023-2323
CVSS 6.8 MEDIUM 2023-04-27FIX AVAILABLE
CVE-2022-3255
CVSS 6.8 MEDIUM 2022-09-21
CVE-2022-1351
CVSS 6.8 MEDIUM 2022-04-14FIX AVAILABLE