unopim vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20255
3. 20263

Newest CVEs

• CVE-2026-102630

  UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host

  unopim · unopim

  Low2.3
• CVE-2026-85395

  UnoPim before 2.1.3 Missing Authorization on Integration Management Routes

  unopim · unopim

  High7.1
• CVE-2026-82524

  UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

  unopim · unopim

  High8.6
• CVE-2025-55745

  UnoPim Quick Export feature is vulnerable to CSV injection

  unopim · unopim

  Low2.5
• CVE-2025-55741

  unopim/unopim allows unauthorized product deletion via mass-delete endpoint

  unopim · unopim

  High8.1
• CVE-2025-55744

  UnoPim vulnerable to CSRF on Product edit feature and creation of other types

  unopim · unopim

  Medium6.9
• CVE-2025-55743

  UnoPim vulnerable to remote code execution through Arbitrary File upload

  unopim · unopim

  High7.3
• CVE-2025-55742

  UnoPim Stored XSS via SVG MIME/Sanitizer Bypass

  unopim · unopim

  High8.0
• CVE-2024-52305

  UnoPim Stored XSS : Cookie hijacking through Create User function

  unopim · unopim

  Medium6.5