Login Request a demo
MA
Vendor
Mautic
3 products with CVEs on record
41
CVEs
0
On KEV
0
New 30D
Products
MA
Mautic
Mautic
9.8
37 CVEs0 on KEV0 new
MA
mautic/core
Mautic
9.9
3 CVEs0 on KEV0 new
DM
Docker Mautic
mautic
5.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-3105
MA
Mautic
Mautic
8.8
0%
Feb 24SQL Injection in Contact Activity API Sorting
CVE-2025-13828
MA
Mautic
Mautic
9.0
0%
Dec 2Mautic user without privileged access to the Marketplace can install and uninstall composer packages
CVE-2025-13827
MA
Mautic
Mautic
8.8
0%
Dec 2GrapesJsBuilder File Upload allows all file uploads
CVE-2025-9823
MA
Mautic
Mautic
4.8
0%
Sep 3Reflected XSS in lead:addLeadTags - Quick Add
CVE-2025-9824
MA
Mautic
Mautic
5.9
0%
Sep 3User Enumeration via Response Timing
CVE-2025-9822
MA
Mautic
Mautic
5.5
0%
Sep 3Secret data extraction via elfinder
CVE-2025-9821
MA
Mautic
Mautic
2.7
0%
Sep 3SSRF via webhook function
CVE-2025-7381
DM
Docker Mautic
mautic
5.3
0%
Jul 9Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images
CVE-2025-5256
MA
Mautic
Mautic
5.4
0%
May 28Open Redirect vulnerability on user unlock path
CVE-2024-47055
MA
Mautic
Mautic
4.3
0%
May 28Segment cloning doesn't have a proper permission check
CVE-2024-47057
MA
Mautic
Mautic
5.3
0%
May 28User name enumeration possible due to response time difference on password reset form
CVE-2024-47056
MA
Mautic
Mautic
5.1
0%
May 28Mautic does not shield .env files from web traffic
CVE-2025-5257
MA
Mautic
Mautic
6.5
0%
May 28Predictable Page Indexing Might Lead to Sensitive Data Exposure
CVE-2024-47051
MA
mautic/core
Mautic
9.9
2%
Feb 26Remote Code Execution & File Deletion in Asset Uploads
CVE-2024-47053
MA
mautic/core
Mautic
7.7
1%
Feb 26Improper Authorization in Reporting API
CVE-2022-25773
MA
mautic/core
Mautic
5.4
1%
Feb 26Relative Path Traversal in assets file upload
CVE-2022-25770
MA
Mautic
Mautic
7.5
0%
Sep 18Insufficient authentication in upgrade flow
CVE-2024-47059
MA
Mautic
Mautic
4.3
0%
Sep 18Users enumeration - weak password login
CVE-2021-27917
MA
Mautic
Mautic
5.4
0%
Sep 18XSS in contact tracking and page hits report
CVE-2024-47050
MA
Mautic
Mautic
6.1
0%
Sep 18XSS in contact/company tracking (no authentication)
CVE-2024-47058
MA
Mautic
Mautic
4.8
0%
Sep 18Cross-site Scripting (XSS) - stored (edit form HTML field)
CVE-2022-25768
MA
Mautic
Mautic
6.5
0%
Sep 18Improper Access Control in UI upgrade process
CVE-2022-25777
MA
Mautic
Mautic
6.5
0%
Sep 18Server-Side Request Forgery in Asset section
CVE-2022-25776
MA
Mautic
Mautic
6.5
0%
Sep 18Sensitive Data Exposure due to inadequate user permission settings
CVE-2022-25775
MA
Mautic
Mautic
7.2
1%
Sep 18SQL Injection in dynamic Reports
CVE-2022-25774
MA
Mautic
Mautic
5.4
0%
Sep 18XSS in Notifications via saving Dashboards
CVE-2022-25769
MA
Mautic
Mautic
9.1
1%
Sep 18Improper regex in htaccess file
CVE-2021-27916
MA
Mautic
Mautic
8.1
1%
Sep 17Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)
CVE-2021-27915
MA
Mautic
Mautic
9.0
1%
Sep 17XSS Cross-site Scripting Stored (XSS) - Description field
CVE-2024-3448
MA
Mautic
Mautic
5.0
0%
Apr 10Improper Access Control Leads to Server-Side Request Forgery in Mautic
CVE-2024-2731
MA
Mautic
Mautic
5.4
0%
Apr 10Improper Access Control Issues Lead to Sensitive Data Exposure in Mautic
CVE-2024-2730
MA
Mautic
Mautic
5.3
1%
Apr 10Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic
CVE-2020-35129
MA
Mautic
Mautic
9.0
1%
Jan 19Mautic before 3.2.4 is affected by stored XSS
CVE-2018-8092
MA
Mautic
Mautic
9.8
2%
Apr 18Mautic before 2.13.0 allows CSV injection
CVE-2018-8071
MA
Mautic
Mautic
6.1
1%
Apr 18Mautic before v2.13.0 has stored XSS via a theme config file
CVE-2018-10189
MA
Mautic
Mautic
7.5
1%
Apr 17An issue was discovered in Mautic 1.x and 2.x before 2.13.0
CVE-2017-1000506
MA
Mautic
Mautic
6.1
1%
Feb 9Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code
CVE-2017-1000490
MA
Mautic
Mautic
6.5
1%
Jan 3Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the…
CVE-2017-1000489
MA
Mautic
Mautic
8.1
1%
Jan 3Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
CVE-2017-1000488
MA
Mautic
Mautic
6.1
1%
Jan 3Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form
CVE-2017-1000046
MA
Mautic
Mautic
7.5
1%
Jul 17Mautic 2.6.1 and earlier fails to set flags on session cookies