craft-cms
Safeguard articles tagged "craft-cms" — guides, analysis, and best practices for software supply chain and application security.
5 articles
CVE-2025-23209: Craft CMS Code Injection Vulnerability
CVE-2025-23209 affects Craft CMS Craft CMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-02-20.
CVE-2024-56145: Craft CMS Code Injection Vulnerability
CVE-2024-56145 affects Craft CMS Craft CMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-06-02.
CVE-2025-35939: Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
CVE-2025-35939 affects Craft CMS Craft CMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-06-02.
CVE-2025-32432: Craft CMS Code Injection Vulnerability
CVE-2025-32432 affects Craft CMS Craft CMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-20.
Craft CMS's Perfect-Score CVE Was the Fix Behind an Older Fix
CVE-2025-32432 scores a maximum 10.0 and is confirmed exploited — and NVD's own record calls it an additional fix for a 2023 vulnerability that wasn't fully closed the first time.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.