Froxlor vulnerabilities

CVEs per yearBy the year they were published

1. 20226
2. 202421
3. 20252
4. 202645
5. 20262
6. 20261

Newest CVEs

• CVE-2026-121436

  Froxlor 2.3.8 before 2.3.15 API Key Disclosure via api_keys.php

  froxlor · froxlor

  High8.6
• CVE-2026-121435

  Froxlor before 2.3.15 Authorization Bypass via Mysqls.add API

  froxlor · froxlor

  Medium5.3
• CVE-2026-121434

  Froxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update API

  froxlor · froxlor

  Medium5.3
• CVE-2026-113678

  Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron

  froxlor · froxlor

  Critical9.4
• CVE-2026-113677

  Froxlor 0.10.0 before 2.3.15 Missing Authorization via SubDomains.delete API

  froxlor · froxlor

  Medium5.3
• CVE-2026-113676

  Froxlor 0.10.0 before 2.3.15 Authorization Bypass via Admins.get API

  froxlor · froxlor

  Medium5.3
• CVE-2026-109963

  Froxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.php

  froxlor · froxlor

  Medium5.3
• CVE-2026-109962

  Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs API

  froxlor · froxlor

  Medium5.3
• CVE-2026-109961

  Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_members

  froxlor · froxlor

  High8.4
• CVE-2026-109960

  Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value

  froxlor · froxlor

  High8.7