PL
Vendor
pluginsGLPI
10 products with CVEs on record
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-11321
DA
datainjection
pluginsGLPI
6.4
0%
Jul 10GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import
CVE-2026-53987
TA
tag
pluginsGLPI
6.4
1%
Jul 9Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge Rendering
CVE-2026-23489
FI
fields
pluginsGLPI
9.1
0%
Mar 16Fields GLPI plugin vulnerable to RCE in dropdown generation
CVE-2026-22821
MR
mreporting
pluginsGLPI
6.5
0%
Feb 12mreporting affected by a SQLI on date change
CVE-2025-65035
DA
databaseinventory
pluginsGLPI
6.4
0%
Dec 19GLPI Database Inventory Plugin Vulnerable to Stored Object Injection
CVE-2025-53360
DA
databaseinventory
pluginsGLPI
4.3
0%
Nov 18pluginsGLPI's Database Inventory Plugin allows any authenticated user to send agent requests
CVE-2025-27153
ES
escalade
pluginsGLPI
6.5
0%
Jul 1Escalade GLPI Plugin Vulnerable to Improper Access Control
CVE-2024-53850
AD
addressing
pluginsGLPI
8.2
1%
Dec 26The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
CVE-2024-45600
FI
fields
pluginsGLPI
7.7
0%
Dec 26Fields GLPI plugin has an Authenticated SQL Injection
CVE-2023-33971
FO
formcreator
pluginsGLPI
5.4
1%
May 31Formcreator vulnerable to stored XSS from ##FULLFORM##
CVE-2023-29006
OR
order
pluginsGLPI
8.8
1%
Apr 5Order GLPI plugin vulnerable to remote code execution from authenticated user
CVE-2023-28855
FI
fields
pluginsGLPI
6.5
1%
Apr 5Fields GLPI plugin vulnerable to unauthorized write access to additional fields
CVE-2021-39190
SC
sccm
pluginsGLPI
5.3
1%
Sep 22SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor