Admidio vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20212
3. 20221
4. 20236
5. 20243
6. 20251
7. 202654

Newest CVEs

• CVE-2026-117554

  Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php

  admidio · admidio

  Medium5.3
• CVE-2026-111916

  Admidio before 5.0.16 Information Disclosure via rss/links.php Weblinks Feed

  Admidio · admidio

  Medium6.9
• CVE-2026-111914

  Admidio 5.0.11 before 5.0.16 Broken Access Control via inventory_data.php

  Admidio · admidio

  High7.1
• CVE-2026-111913

  Admidio 5.0.0 before 5.0.16 Authorization Bypass via pdfl Mode in lists_show.php

  Admidio · admidio

  Medium5.3
• CVE-2026-111912

  Admidio 5.0.0 before 5.0.16 IDOR via Forum Topic Update

  Admidio · admidio

  High7.1
• CVE-2026-109329

  Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.php

  Admidio · admidio

  High8.5
• CVE-2026-109328

  Admidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS via Registration Name

  Admidio · admidio

  Medium5.3
• CVE-2026-109327

  Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.php

  Admidio · admidio

  Medium5.1
• CVE-2026-53760

  Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests

  Admidio · admidio

  Medium5.2
• CVE-2026-82658

  Admidio before 5.0.12 Broken Access Control via profile_function.php

  Admidio · admidio

  Medium5.3