Vendors / umbraco Records 76 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 8
CVSS high 16
Exploited now umbraco records in CISA KEV No umbraco vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00733 · Published 2023-02-24 · No fix listed CWE-434
Priority LOW 36
In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for remote code execution.
CVSS 3.1 HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00755 · Published 2026-01-16 · No fix listed CWE-829
Priority LOW 35
This affects all versions of package UmbracoForms.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-07-28 · No fix listed CWE-1188
Priority LOW 32
Umbraco.Forms is a web form framework written for the nuget ecosystem.
CVSS 3.1 MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00387 · Published 2025-01-14 · Fixed in 8.13.16, 10.5.7 +2 CWE-20
Priority LOW 27
Umbraco Forms is a form builder that integrates with the Umbraco content management system.
CVSS 4.0 MEDIUM 6.0· Network · Low privileges · No interaction · EPSS 0.00456 · Published 2026-01-29 · Fixed in 16.4.1, 17.1.1 CWE-22
Priority LOW 24
Umbraco Commerce is an open source dotnet web forms solution.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00341 · Published 2024-05-28 · Fixed in 13.0.1, 12.2.2 +2 CWE-79
Priority LOW 12
Umbraco Forms is a form builder that integrates with the Umbraco content management system.
CVSS 4.0 LOW 2.3· Network · No auth · User interaction · EPSS 0.003 · Published 2025-05-13 · Fixed in 13.4.2, 15.1.2 CWE-116
Open these records in search → All records by CVSS severity
8 16 51 1 0
THREATIST.IORead the docs