Known Vulnerabilities for Grav Cms by Getgrav
Listed below are 5 of the newest known vulnerabilities associated with "Grav Cms" by "Getgrav".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-75837 json | Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super restr... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-75836 json | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav's admin-next/API stack) before 1.0.14 fails to enforce the au... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-75835 json | Grav API plugin (getgrav/grav-plugin-api) before 1.0.14 contains a missing authorization vulnerability in userPassesAuthorize... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-75834 json | Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss() function (system/src/Gra... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-75833 json | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0's admin-next/API stack) before version 1.0.14 contains an... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-75832 json | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav 2.0) before version 1.0.14 (fixed in 1.0.15) contains a missi... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-75831 json | Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering through the so... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-75830 json | grav-plugin-api (getgrav/grav-plugin-api) versions >= 1.0.0-beta.10 and <= 1.0.14 contain a path traversal vulnerability in t... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-75829 json | grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate() endpoint, allowing attackers with api... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-75828 json | Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the detectXss() function where unpaired quotes in ... | Not Provided | 2026-08-18 | 2026-08-18 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Getgrav | Grav Cms | 1.7.7 | |||
| Application | Getgrav | Grav Cms | 1.7.6 | |||
| Application | Getgrav | Grav Cms | 1.7.5 | |||
| Application | Getgrav | Grav Cms | 1.7.4 | |||
| Application | Getgrav | Grav Cms | 1.7.3 | |||
| Application | Getgrav | Grav Cms | 1.7.1 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 | |||
| Application | Getgrav | Grav Cms | 1.7.0 |