What’s Vulnerable › Products

doramart DoraCMS vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your doramart DoraCMS version is affected

Latest doramart DoraCMS vulnerabilities

• CVE-2026-3795 — doramart DoraCMS v1.js createFileBypath path traversal (CVSS 9.8)
• CVE-2026-3794 — doramart DoraCMS Email API send improper authentication (CVSS 9.8)
• CVE-2026-25870 — DoraCMS <= 3.1 UEditor Remote Image Fetch SSRF (CVSS 5.8)
• CVE-2024-28715 — (CVSS 8.8)
• CVE-2023-51840 — (CVSS 9.8)
• CVE-2023-49444 — (CVSS 5.4)
• CVE-2023-49443 — (CVSS 9.8)
• CVE-2022-35147 — (CVSS 9.8)
• CVE-2022-25464 — (CVSS 4.8)
• CVE-2020-18220 — (CVSS 7.5)
• CVE-2018-16622 — (CVSS 5.4)