Mautic
30 CVEs tracked since 2018. Since Jan 2018, none of them reached CISA KEV.
Mautic CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2018-01 | 3 | 0 |
| 2018-02 | null or fewer | |
| 2018-03 | null or fewer | |
| 2018-04 | null or fewer | |
| 2018-05 | null or fewer | |
| 2018-06 | null or fewer | |
| 2018-07 | null or fewer | |
| 2018-08 | null or fewer | |
| 2018-09 | null or fewer | |
| 2018-10 | null or fewer | |
| 2018-11 | null or fewer | |
| 2018-12 | null or fewer | |
| 2019-01 | null or fewer | |
| 2019-02 | null or fewer | |
| 2019-03 | null or fewer | |
| 2019-04 | null or fewer | |
| 2019-05 | null or fewer | |
| 2019-06 | null or fewer | |
| 2019-07 | null or fewer | |
| 2019-08 | null or fewer | |
| 2019-09 | null or fewer | |
| 2019-10 | null or fewer | |
| 2019-11 | null or fewer | |
| 2019-12 | null or fewer | |
| 2020-01 | null or fewer | |
| 2020-02 | null or fewer | |
| 2020-03 | null or fewer | |
| 2020-04 | null or fewer | |
| 2020-05 | null or fewer | |
| 2020-06 | null or fewer | |
| 2020-07 | null or fewer | |
| 2020-08 | null or fewer | |
| 2020-09 | null or fewer | |
| 2020-10 | null or fewer | |
| 2020-11 | null or fewer | |
| 2020-12 | null or fewer | |
| 2021-01 | null or fewer | |
| 2021-02 | null or fewer | |
| 2021-03 | null or fewer | |
| 2021-04 | null or fewer | |
| 2021-05 | null or fewer | |
| 2021-06 | null or fewer | |
| 2021-07 | null or fewer | |
| 2021-08 | 5 | 0 |
| 2021-09 | null or fewer | |
| 2021-10 | null or fewer | |
| 2021-11 | null or fewer | |
| 2021-12 | null or fewer | |
| 2022-01 | null or fewer | |
| 2022-02 | null or fewer | |
| 2022-03 | null or fewer | |
| 2022-04 | null or fewer | |
| 2022-05 | null or fewer | |
| 2022-06 | null or fewer | |
| 2022-07 | null or fewer | |
| 2022-08 | null or fewer | |
| 2022-09 | null or fewer | |
| 2022-10 | null or fewer | |
| 2022-11 | null or fewer | |
| 2022-12 | null or fewer | |
| 2023-01 | null or fewer | |
| 2023-02 | null or fewer | |
| 2023-03 | null or fewer | |
| 2023-04 | null or fewer | |
| 2023-05 | null or fewer | |
| 2023-06 | null or fewer | |
| 2023-07 | null or fewer | |
| 2023-08 | null or fewer | |
| 2023-09 | null or fewer | |
| 2023-10 | null or fewer | |
| 2023-11 | null or fewer | |
| 2023-12 | null or fewer | |
| 2024-01 | null or fewer | |
| 2024-02 | null or fewer | |
| 2024-03 | null or fewer | |
| 2024-04 | null or fewer | |
| 2024-05 | null or fewer | |
| 2024-06 | null or fewer | |
| 2024-07 | null or fewer | |
| 2024-08 | null or fewer | |
| 2024-09 | 13 | 0 |
| 2024-10 | null or fewer | |
| 2024-11 | null or fewer | |
| 2024-12 | null or fewer | |
| 2025-01 | null or fewer | |
| 2025-02 | null or fewer | |
| 2025-03 | null or fewer | |
| 2025-04 | null or fewer | |
| 2025-05 | 5 | 0 |
| 2025-06 | null or fewer | |
| 2025-07 | null or fewer | |
| 2025-08 | null or fewer | |
| 2025-09 | 4 | 0 |
Products
The products that kept showing up in Mautic's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Mautic.
- CVE-2026-3105SQL Injection in Contact Activity API Sorting7.6
- CVE-2025-13828Mautic user without privileged access to the Marketplace can install and uninstall composer packages—
- CVE-2025-13827GrapesJsBuilder File Upload allows all file uploads—
- CVE-2025-9823Reflected XSS in lead:addLeadTags - Quick Add—
- CVE-2025-9824User Enumeration via Response Timing5.9
- CVE-2025-9822Secret data extraction via elfinder5.5
- CVE-2025-9821SSRF via webhook function2.7
- CVE-2025-7381Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images5.3
- CVE-2025-5256Open Redirect vulnerability on user unlock path5.4
- CVE-2024-47055Segment cloning doesn't have a proper permission check4.3
- CVE-2024-47057User name enumeration possible due to response time difference on password reset form5.3
- CVE-2024-47056Mautic does not shield .env files from web traffic5.1
- CVE-2025-5257Predictable Page Indexing Might Lead to Sensitive Data Exposure6.5
- CVE-2024-47051Remote Code Execution & File Deletion in Asset Uploads9.1
- CVE-2024-47053Improper Authorization in Reporting API7.7
The record
- Peak rank
- #52 in Sep 2024
- Busiest month shown
- Sep 2024, 13 CVEs
- Months with a KEV entry
- 0 since Jan 2018
- Monthly snapshots
- 5 since 2018