What’s Vulnerable › Products

GetSimpleCMS vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your GetSimpleCMS version is affected

Latest GetSimpleCMS vulnerabilities

• CVE-2021-47870 — GetSimple CMS My SMTP Contact Plugin 1.1.2 - Stored XSS (CVSS 5.4)
• CVE-2021-47860 — GetSimple CMS Custom JS 0.1 - CSRF to XSS to RCE (CVSS 4.3)
• CVE-2021-47830 — GetSimple CMS My SMTP Contact Plugin 1.1.1 - CSRF (CVSS 6.5)
• CVE-2021-47778 — GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection (CVSS 7.2)
• CVE-2013-10032 — GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload (CVSS 8.8)
• CVE-2024-11125 — GetSimpleCMS profile.php cross-site request forgery (CVSS 4.3)
• CVE-2023-51246 — (CVSS 5.4)
• CVE-2023-6188 — GetSimpleCMS theme-edit.php code injection (CVSS 9.8)
• CVE-2023-46040 — (CVSS 5.4)
• CVE-2023-46042 — (CVSS 9.8)
• CVE-2021-36601 — (CVSS 6.1)
• CVE-2020-21353 — (CVSS 5.4)
• CVE-2020-18660 — (CVSS 6.1)
• CVE-2020-18659 — (CVSS 6.1)
• CVE-2020-18658 — (CVSS 6.1)
• CVE-2020-18657 — (CVSS 6.1)
• CVE-2020-20391 — (CVSS 5.4)
• CVE-2020-20389 — (CVSS 4.8)
• CVE-2021-28977 — (CVSS 4.8)
• CVE-2021-28976 — (CVSS 7.2)
• CVE-2020-18191 — (CVSS 9.1)