mautic vulnerabilities

CVEs per yearBy the year they were published

1. 20216
2. 20222
3. 202416
4. 202515
5. 20261

Newest CVEs

• CVE-2026-3105

  SQL Injection in Contact Activity API Sorting

  Mautic · Mautic

  High7.6
• CVE-2025-13828

  Mautic user without privileged access to the Marketplace can install and uninstall composer packages

  Mautic · Mautic

  Critical9.0
• CVE-2025-13827

  GrapesJsBuilder File Upload allows all file uploads

  Mautic · Mautic

  High8.8
• CVE-2025-9823

  Reflected XSS in lead:addLeadTags - Quick Add

  Mautic · Mautic

  Medium4.8
• CVE-2025-9824

  User Enumeration via Response Timing

  Mautic · Mautic

  Medium5.9
• CVE-2025-9822

  Secret data extraction via elfinder

  Mautic · Mautic

  Medium5.5
• CVE-2025-9821

  SSRF via webhook function

  Mautic · Mautic

  Low2.7
• CVE-2025-7381

  Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images

  mautic · Docker Mautic

  Medium5.3
• CVE-2025-5256

  Open Redirect vulnerability on user unlock path

  Mautic · Mautic

  Medium5.4
• CVE-2024-47055

  Segment cloning doesn't have a proper permission check

  Mautic · Mautic

  Medium4.3