getgrav grav-plugin-admin vulnerabilities

3 published CVEs name getgrav grav-plugin-admin among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 1
Known exploited: 0

Critical 1High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20212
20261

Newest CVEs

CVE-2026-44737
grav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][title]
getgrav · grav-plugin-admin
Medium6.2
CVE-2021-29439
Plugins can be installed with minimal admin privileges
getgrav · grav-plugin-admin
High7.2
CVE-2021-21425
Unauthenticated Arbitrary YAML Write/Update leads to Code Execution
getgrav · grav-plugin-admin
Critical9.3

Most common weaknesses