Login Request a demo
DO
Product
DotNetNuke
by Dnnsoftware · last CVE Apr 17, 2026
On CISA KEVExploited in the wildRansomware-linked
76
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities76In the news0Timeline
Severity mix
Critical 3High 14Medium 32Low 1
Severity
All severities76Critical3High14Medium32Low1
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add DotNetNuke to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-64095
9.8
47%
Oct 28
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
Affected: before 10.1.1
CVE-2015-2794
9.8
75%
Feb 6
The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to…
Affected: through 07.04.00
CVE-2025-59545
9.0
0%
Sep 23
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Affected: before 10.1.0
Showing 3