What’s Vulnerable › Products
Payload CMS Payload vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Payload CMS Payload version is affected
Latest Payload CMS Payload vulnerabilities
- CVE-2025-4644 — User Session Fixation after Account Removal in PayloadCMS (CVSS 5.3)
- CVE-2025-4643 — Lack of JWT Expiration after Log Out in PayloadCMS (CVSS 6.3)