What’s Vulnerable › Products

publify/publify vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your publify/publify version is affected

Latest publify/publify vulnerabilities

• CVE-2023-0569 — Weak Password Requirements in publify/publify (CVSS 6.5)
• CVE-2023-0299 — Improper Input Validation in publify/publify (CVSS 9.8)
• CVE-2022-2815 — Insecure Storage of Sensitive Information in publify/publify (CVSS 6.5)
• CVE-2022-1812 — Integer Overflow or Wraparound in publify/publify (CVSS 9.8)
• CVE-2022-1811 — Unrestricted Upload of File with Dangerous Type in publify/publify (CVSS 5.4)
• CVE-2022-1810 — Authorization Bypass Through User-Controlled Key in publify/publify (CVSS 4.3)
• CVE-2022-1553 — Leaking password protected articles content due to improper access control in publify/publify (CVSS 4.9)
• CVE-2022-0578 — Code Injection in publify/publify (CVSS 6.5)
• CVE-2022-0574 — Improper Access Control in publify/publify (CVSS 6.5)
• CVE-2022-0524 — Business Logic Errors in publify/publify (CVSS 7.5)
• CVE-2021-25975 — Publify - Stored Cross-Site Scripting (XSS) due to Unrestricted File Upload (CVSS 5.4)
• CVE-2021-25974 — Publify - Stored Cross-Site Scripting (XSS) in Editor (CVSS 5.4)
• CVE-2021-25973 — Publify - Improper Authorization Leads to Guest Signup Restriction Bypass (CVSS 6.5)