Known Vulnerabilities for Grav Cms by Getgrav
Listed below are 5 of the newest known vulnerabilities associated with "Grav Cms" by "Getgrav".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112782 json | Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous vi... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-112781 json | Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected conf... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-112780 json | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public st... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-112779 json | Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language co... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-109326 json | Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configur... | Not Provided | 2026-10-12 | 2026-10-18 |
| CVE-2026-109325 json | Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback ... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109324 json | Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by upl... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109323 json | Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to ... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109322 json | Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin ... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-109321 json | Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a determ... | Not Provided | 2026-10-12 | 2026-10-18 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Getgrav | Grav Cms | 1.7.7 | |||
| Application | Getgrav | Grav Cms | 1.7.6 | |||
| Application | Getgrav | Grav Cms | 1.7.5 | |||
| Application | Getgrav | Grav Cms | 1.7.4 | |||
| Application | Getgrav | Grav Cms | 1.7.3 | |||
| Application | Getgrav | Grav Cms | 1.7.1 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 |