What’s Vulnerable › Products

SeaCMS vulnerabilities

123 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 45 published in the last 12 months.

Check whether your SeaCMS version is affected

Latest SeaCMS vulnerabilities

• CVE-2019-25778 — SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter (CVSS 8.2)
• CVE-2026-85138 — SeaCMS WeChat index.php addslashes sql injection (CVSS 7.3)
• CVE-2026-85137 — SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection (CVSS 7.3)
• CVE-2026-82603 — SeaCMS Comment Cache member.php del_pl path traversal (CVSS 5.4)
• CVE-2026-82602 — SeaCMS ass.php authorization (CVSS 5.3)
• CVE-2026-82601 — SeaCMS err.php cross site scripting (CVSS 4.3)
• CVE-2026-82600 — SeaCMS zyapi.php sql injection (CVSS 7.3)
• CVE-2026-82599 — SeaCMS Avatar Upload member.php unlink path traversal (CVSS 5.4)
• CVE-2026-82598 — SeaCMS Template search.php parseIf code injection (CVSS 7.3)
• CVE-2020-36932 — Seacms 11.1 - 'checkuser' Stored XSS (CVSS 6.1)
• CVE-2025-15003 — SeaCMS admin_video.php sql injection (CVSS 7.2)
• CVE-2025-15002 — SeaCMS mysqli.class.php sql injection (CVSS 9.8)
• CVE-2025-60449 — (CVSS 4.9)
• CVE-2025-11071 — SeaCMS Cron Task Management admin_cron.php sql injection (CVSS 7.2)
• CVE-2025-10662 — SeaCMS admin_members.php sql injection (CVSS 9.8)
• CVE-2025-50592 — (CVSS 5.4)
• CVE-2025-6864 — SeaCMS admin_type.php cross-site request forgery (CVSS 4.3)
• CVE-2024-40570 — (CVSS 6.5)
• CVE-2025-44073 — (CVSS 9.8)
• CVE-2025-44074 — (CVSS 9.8)
• CVE-2025-44072 — (CVSS 9.8)
• CVE-2025-44071 — (CVSS 9.8)
• CVE-2025-4257 — SeaCMS admin_pay.php cross site scripting (CVSS 6.1)
• CVE-2025-4256 — SeaCMS admin_paylog.php cross site scripting (CVSS 5.4)
• CVE-2025-3797 — SeaCMS admin_topic.php sql injection (CVSS 7.2)