MA
Product
Mautic
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 8Medium 23Low 1
Watch
Add Mautic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3105 | 8.8 | Feb 24 | SQL Injection in Contact Activity API Sorting Affected: >= 2.10.0 before < 4.4.19 <5.2.10 <6.0.8 <7.0.1 |
| CVE-2025-13827 | 8.8 | Dec 2 | GrapesJsBuilder File Upload allows all file uploads Affected: <4.4.18, <5.2.9, <6.0.7 |
| CVE-2021-27916 | 8.1 | Sep 17 | Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder) Affected: >= 3.3.0 through <= 4.4.11; >= 5.0.0 through <= 5.0.3 |
| CVE-2017-1000489 | 8.1 | Jan 3 | Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address Affected: 2.9.0; 2.9.2; 2.10.0; 2.11.0 |
| CVE-2022-25770 | 7.5 | Sep 18 | Insufficient authentication in upgrade flow Affected: >= 1.0.0-beta3 before < 4.4.13; >= 5.0.0 before < 5.1.1. |
| CVE-2018-10189 | 7.5 | Apr 17 | An issue was discovered in Mautic 1.x and 2.x before 2.13.0 Affected: 1.0.0 through 1.4.1; 2.0.0 before 2.13.0 |
| CVE-2017-1000046 | 7.5 | Jul 17 | Mautic 2.6.1 and earlier fails to set flags on session cookies Affected: through 2.6.1 |
| CVE-2022-25775 | 7.2 | Sep 18 | SQL Injection in dynamic Reports Affected: >= 2.14.1 before < 4.4.12; > 5.0.0 before < 5.0.4 |
Showing 8