pluginsGLPI vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20222
3. 20233
4. 20242
5. 20253
6. 20264

Newest CVEs

• CVE-2026-11321

  GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import

  pluginsGLPI · datainjection

  High7.1
• CVE-2026-53987

  Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge Rendering

  pluginsGLPI · tag

  High7.3
• CVE-2026-23489

  Fields GLPI plugin vulnerable to RCE in dropdown generation

  pluginsGLPI · fields

  Critical9.1
• CVE-2026-22821

  mreporting affected by a SQLI on date change

  pluginsGLPI · mreporting

  Medium4.9
• CVE-2025-65035

  GLPI Database Inventory Plugin Vulnerable to Stored Object Injection

  pluginsGLPI · databaseinventory

  Medium6.4
• CVE-2025-53360

  pluginsGLPI's Database Inventory Plugin allows any authenticated user to send agent requests

  pluginsGLPI · databaseinventory

  Medium4.3
• CVE-2025-27153

  Escalade GLPI Plugin Vulnerable to Improper Access Control

  pluginsGLPI · escalade

  Medium6.5
• CVE-2024-53850

  The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation

  pluginsGLPI · addressing

  High8.2
• CVE-2024-45600

  Fields GLPI plugin has an Authenticated SQL Injection

  pluginsGLPI · fields

  High7.7
• CVE-2023-33971

  Formcreator vulnerable to stored XSS from ##FULLFORM##

  pluginsGLPI · formcreator

  Medium6.1