Getgrav
169 CVEs tracked since 2021. Since Apr 2021, none of them reached CISA KEV.
Getgrav CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2021-04 | 3 | 0 |
| 2021-05 | null or fewer | |
| 2021-06 | null or fewer | |
| 2021-07 | null or fewer | |
| 2021-08 | null or fewer | |
| 2021-09 | null or fewer | |
| 2021-10 | null or fewer | |
| 2021-11 | null or fewer | |
| 2021-12 | null or fewer | |
| 2022-01 | null or fewer | |
| 2022-02 | null or fewer | |
| 2022-03 | null or fewer | |
| 2022-04 | null or fewer | |
| 2022-05 | null or fewer | |
| 2022-06 | null or fewer | |
| 2022-07 | null or fewer | |
| 2022-08 | null or fewer | |
| 2022-09 | null or fewer | |
| 2022-10 | null or fewer | |
| 2022-11 | null or fewer | |
| 2022-12 | null or fewer | |
| 2023-01 | null or fewer | |
| 2023-02 | null or fewer | |
| 2023-03 | null or fewer | |
| 2023-04 | null or fewer | |
| 2023-05 | null or fewer | |
| 2023-06 | 5 | 0 |
| 2023-07 | null or fewer | |
| 2023-08 | null or fewer | |
| 2023-09 | null or fewer | |
| 2023-10 | null or fewer | |
| 2023-11 | null or fewer | |
| 2023-12 | null or fewer | |
| 2024-01 | null or fewer | |
| 2024-02 | null or fewer | |
| 2024-03 | 6 | 0 |
| 2024-04 | null or fewer | |
| 2024-05 | null or fewer | |
| 2024-06 | null or fewer | |
| 2024-07 | null or fewer | |
| 2024-08 | null or fewer | |
| 2024-09 | null or fewer | |
| 2024-10 | null or fewer | |
| 2024-11 | null or fewer | |
| 2024-12 | null or fewer | |
| 2025-01 | null or fewer | |
| 2025-02 | null or fewer | |
| 2025-03 | null or fewer | |
| 2025-04 | null or fewer | |
| 2025-05 | null or fewer | |
| 2025-06 | null or fewer | |
| 2025-07 | null or fewer | |
| 2025-08 | null or fewer | |
| 2025-09 | null or fewer | |
| 2025-10 | null or fewer | |
| 2025-11 | null or fewer | |
| 2025-12 | 22 | 0 |
| 2026-01 | null or fewer | |
| 2026-02 | null or fewer | |
| 2026-03 | null or fewer | |
| 2026-04 | null or fewer | |
| 2026-05 | 14 | 0 |
| 2026-06 | null or fewer | |
| 2026-07 | 38 | 0 |
| 2026-08 | 66 | 0 |
| 2026-09 | 15 | 0 |
Products
The products that kept showing up in Getgrav's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Getgrav.
- CVE-2026-100673Grav Data Manager before 1.4.5 Stored XSS via item-detail view8.2
- CVE-2026-100672grav-plugin-comments before 1.2.11 Unauthenticated Information Disclosure7.5
- CVE-2026-100671Grav before 2.0.25 Session Cookie Theft via Twig Sandbox8.0
- CVE-2026-100670Grav CMS 2.0.14 through 2.0.24 Privilege Escalation via Blueprint Guard Bypass8.8
- CVE-2026-100669Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass7.5
- CVE-2026-100668Grav before 2.0.25 Sandbox Escape via array Filter6.5
- CVE-2026-100667grav-plugin-login 3.8.7 through 3.9.6 Two-Factor Authentication Bypass5.3
- CVE-2026-92917Grav 2.0.0-rc.1 through 2.0.21 Configuration Disclosure via print_r7.5
- CVE-2026-92916Grav through 2.0.21 Unauthenticated Information Disclosure via Clockwork7.5
- CVE-2025-64059Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and...1.8
- CVE-2026-86197Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox—
- CVE-2026-86196Grav API Plugin before 1.0.20 Authentication Bypass via Host Header—
- CVE-2026-86194Grav Form Plugin before 9.1.22 Cross-Page Form Execution—
- CVE-2026-86195grav-plugin-api 1.0.0 through 1.0.19 Privilege Escalation via Dot-Keyed Super Flag—
- CVE-2026-86193Grav API Plugin Authentication Bypass via Group-Inherited Super—
The record
- Peak rank
- #14 in Aug 2026
- Busiest month shown
- Aug 2026, 66 CVEs
- Months with a KEV entry
- 0 since Apr 2021
- Monthly snapshots
- 8 since 2021