All products

processwire/processwire

Composer · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
ProcessWire: server-side request forgery vulnerability in the admin panel's 'Add Module From URL' featureCVE-2026-40500 · GHSA-GMWR-9J4P-96VM processwire/processwire Composer Medium No fix reported
ProcessWire CMS vulnerable to resource-exhaustion Denial of ServiceCVE-2025-60790 · GHSA-9P44-Q66P-XM6P processwire/processwire Composer Medium No fix reported
ProcessWire Cross Site Request Forgery vulnerabilityCVE-2024-41597 · GHSA-R9VW-CJF9-XH4X processwire/processwire Composer Low No fix reported
Arbitrary Code Execution in ProcesswireCVE-2023-24676 · GHSA-2CVG-W29M-J8XC processwire/processwire Composer High No fix reported
ProcessWire vulnerable to Cross-Site Request ForgeryCVE-2022-40488 · GHSA-VPWH-QMWC-2PHG processwire/processwire Composer Medium No fix reported
ProcessWire vulnerable to Cross-site ScriptingCVE-2022-40487 · GHSA-8G35-PRRR-GXXF processwire/processwire Composer Medium No fix reported