Vendors / Processwire Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Processwire records in CISA KEV No Processwire vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parameter when installing a new module.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01312 · Published 2024-01-24 · No fix listed CWE-94
Priority MEDIUM 62
ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validation, enabling resource-exhaustion Denial of Service.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00433 · Published 2025-10-21 · No fix listed CWE-400
Priority MEDIUM 53
Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment.
CVSS 3.1 MEDIUM 4.2· Network · No auth · User interaction · EPSS 0.00212 · Published 2024-07-19 · No fix listed CWE-352
Priority MEDIUM 49
A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.1533 · Published 2022-02-22 · No fix listed CWE-22
Priority LOW 30
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00538 · Published 2022-10-31 · No fix listed CWE-79
Priority LOW 29
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00321 · Published 2022-10-31 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 2 4 0 0
THREATIST.IORead the docs