Sploitus

22 exploited vulnerabilities in Wagtail

Vulnerabilities with publicly known exploits

Vendors
Wagtail, Django, Apache, Unknown, Nginx
With known exploits
22
Affected Torchbox Wagtail versions
< 6.3.8, 7.0.6, 7.2.3, 7.3

Vulnerabilities with exploits

Highest CVSS first — each links to the exploits we have indexed

CVE-2023-28836
CVSS 7.5 HIGH 2023-04-03FIX AVAILABLE
CVE-2026-54263
CVSS 7.3 HIGH 2026-07-01FIX AVAILABLE
CVE-2024-39317
CVSS 7.1 HIGH 2024-07-11FIX AVAILABLE
CVE-2020-11001
CVSS 6.8 MEDIUM 2020-04-14FIX AVAILABLE
CVE-2026-54261
CVSS 6.5 MEDIUM 2026-07-01FIX AVAILABLE
CVE-2026-44200
CVSS 6.5 MEDIUM 2026-05-08FIX AVAILABLE
CVE-2026-44199
CVSS 6.5 MEDIUM 2026-05-08FIX AVAILABLE
CVE-2026-44197
CVSS 6.5 MEDIUM 2026-05-08FIX AVAILABLE
CVE-2026-28223
CVSS 6.1 MEDIUM 2026-03-03FIX AVAILABLE
CVE-2026-28222
CVSS 6.1 MEDIUM 2026-03-03FIX AVAILABLE
CVE-2023-28837
CVSS 5.9 MEDIUM 2023-04-03FIX AVAILABLE
CVE-2024-35228
CVSS 5.5 MEDIUM 2024-05-30FIX AVAILABLE
CVE-2021-32681
CVSS 5.4 MEDIUM 2021-06-17FIX AVAILABLE
CVE-2026-44201
CVSS 5.3 MEDIUM 2026-05-08FIX AVAILABLE
CVE-2026-25517
CVSS 5.1 MEDIUM 2026-02-03FIX AVAILABLE
CVE-2022-21683
CVSS 5.1 MEDIUM 2022-01-18FIX AVAILABLE
CVE-2026-54262
CVSS 4.3 MEDIUM 2026-07-01FIX AVAILABLE
CVE-2026-54260
CVSS 4.3 MEDIUM 2026-07-01FIX AVAILABLE
CVE-2026-54259
CVSS 4.3 MEDIUM 2026-07-01FIX AVAILABLE
CVE-2026-44198
CVSS 4.3 MEDIUM 2026-05-08FIX AVAILABLE
CVE-2024-32882
CVSS 2.7 LOW 2024-05-01FIX AVAILABLE
CVE-2023-45809
CVSS 2.7 LOW 2023-10-19FIX AVAILABLE