Read the docs

SPIP

Records88All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical20CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

SPIP records in CISA KEV

No SPIP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Spip 69 records CRITICAL Interface Traduction Objets 2 records HIGH Jeux 1 record MEDIUM Referer Spam 1 record HIGH Saisies 1 record MEDIUM Tickets 1 record HIGH

Records

2 records in Interface Traduction Objets · all components

TI-2026-22107 CVE-2026-27747 · GHSA-77xw-22r9-95g2

SPIP interface_traduction_objets < 2.2.2 Authenticated SQL Injection

Priority HIGH 66

The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0043 Published 2026-02-25 Fixed in 2.2.2 CWE-89
TI-2026-22105 CVE-2026-27745 · GHSA-6rvw-w3xj-gg67

SPIP interface_traduction_objets < 2.2.2 Authenticated RCE

Priority MEDIUM 41

The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00866 Published 2026-02-25 Fixed in 2.2.2 CWE-94
Open these records in search →