Known Vulnerabilities for products from Mautic
Listed below are 9 of the newest known vulnerabilities associated with the vendor "Mautic".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-9811 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-9809 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-9808 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-9559 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-9558 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-9557 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-4776 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2020-35129 json | Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could at... | 9 - CRITICAL | 2021-01-19 | 2021-01-27 |
| CVE-2018-10189 json | An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per co... | 7.5 - HIGH | 2018-04-17 | 2018-05-23 |
| CVE-2018-8092 json | Mautic before 2.13.0 allows CSV injection. | 9.8 - CRITICAL | 2018-04-18 | 2020-08-24 |
| CVE-2018-8071 json | Mautic before v2.13.0 has stored XSS via a theme config file. | 6.1 - MEDIUM | 2018-04-18 | 2018-05-21 |
| CVE-2017-1000506 json | Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in de... | 6.1 - MEDIUM | 2018-02-09 | 2018-02-26 |
| CVE-2017-1000490 json | Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to ... | 6.5 - MEDIUM | 2018-01-03 | 2021-01-25 |
| CVE-2017-1000489 json | Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address | 8.1 - HIGH | 2018-01-03 | 2021-01-25 |
| CVE-2017-1000488 json | Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using... | 6.1 - MEDIUM | 2018-01-03 | 2021-01-25 |
| CVE-2017-1000046 json | Mautic 2.6.1 and earlier fails to set flags on session cookies | Not Provided | 2017-07-17 | 2025-04-20 |
Known software with vulnerabilities from Mautic
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mautic | Mautic | - |