Craft CMS Allows Remote Code Execution

RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms

Potential RCE with a compromised security key in craft/cms

Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations

Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance

Craft CMS Vulnerable to Privilege Escalation/Bypass through UsersController->actionImpersonateWithToken()

Craft CMS Remote Code Execution vulnerability

Craft has a Twig Function Blocklist Bypass

Craft Affected by Authenticated RCE via "craft.app.fs.write()" in Twig Templates

Unauthenticated Craft CMS users can trigger a database backup

Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE

Control panel only API response emulation replaces "securityKey" and reaches server RCE

Craft CMS 5.0.0 before 5.11.0 RCE via Twig Sandbox Behavior Injection

Craft CMS 5.0.0 before 5.11.0 RCE via Asset::getMimeType Transform Injection

Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE via Twig group Filter Array-Callable

Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 RCE via actionCacheUpdates Behavior Injection

Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every

Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Execution

Craft CMS before 4.18.6 Remote Code Execution via signed cookie

Low-privilege RCE through element-search eager loading

Craft CMS before 5.10.12 Remote Code Execution via element-index

Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE

Craft CMS 5.0.0-RC1 before 5.10.11 Authentication Bypass via administrateUsers

Craft CMS 5.0.0-RC1 before 5.10.11 GraphQL Entry Mutation Site Scope Bypass

Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape

Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.config

CraftCMS's `ElementSearchController` Affected by Blind SQL Injection

CraftCMS has an RCE vulnerability via relational conditionals in the control panel

Craft has a GraphQL Asset Mutation Privilege Escalation

Craft has a SQL Injection in Element Indexes via criteria[orderBy]

Craft CMS vulnerable to potential authenticated Remote Code Execution via Twig SSTI

Craft contains a theoretical bypass for CVE-2025-23209

Craft CMS Privilege Escalation

GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete

Arbitrary user password reset leading to administrator account takeover

Authenticated RCE through Twig sandbox escape

Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behavior

Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password

Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQL

Craft affected by IDOR via GraphQL @parseRefs

Craft CMS Allows TOTP Token To Stay Valid After Use

Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget

Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE

Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlock Field Layout

Craft CMS - Remote Code Execution via Missing Config Sanitization in FieldsController

Craft CMS: Potential authenticated Remote Code Execution via malicious attached Behavior