Cotonti vulnerabilities

Newest CVEs

• CVE-2026-121553

  Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime())

  cotonti · cotonti

  Medium6.3
• CVE-2026-101093

  Cotonti through 1.0.0 Cross-Site Request Forgery via User Group Deletion

  Cotonti · Cotonti

  Medium5.3
• CVE-2026-100524

  Cotonti through 1.0.0 Cross-Site Request Forgery via Extensions Manager

  Cotonti · Cotonti

  Medium5.3
• CVE-2026-100523

  Cotonti through 1.0.0 Open Redirect via message.php redirect parameter

  Cotonti · Cotonti

  Medium5.1
• CVE-2026-100522

  Cotonti through 1.0.0 Reflected XSS via message.php lng parameter

  Cotonti · Cotonti

  Medium5.1
• CVE-2026-100521

  Cotonti through 1.0.0 Reflected XSS via search highlight parameter

  Cotonti · Cotonti

  Medium5.1
• CVE-2026-93873

  Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin

  Cotonti · Cotonti

  Medium5.3
• CVE-2026-93872

  Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter

  Cotonti · Cotonti

  High7.7
• CVE-2026-93871

  Cotonti through 1.0.0 Stored Open Redirect via Page redir: Prefix

  Cotonti · Cotonti

  Medium5.1
• CVE-2026-93870

  Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler

  Cotonti · Cotonti

  Medium5.3