What’s Vulnerable › Products

Tiki vulnerabilities

75 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Tiki version is affected

Latest Tiki vulnerabilities

• CVE-2025-34111 — Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE (CVSS 9.8)
• CVE-2025-32461 — (CVSS 9.9)
• CVE-2021-36551 — (CVSS 5.4)
• CVE-2021-36550 — (CVSS 5.4)
• CVE-2020-29254 — (CVSS 8.8)
• CVE-2020-8966 — Cross Site Scripting (XSS) flaws found in Tiki-Wiki CMS software (CVSS 6.1)
• CVE-2013-6022 — (CVSS 6.1)
• CVE-2011-4336 — (CVSS 6.1)
• CVE-2010-4241 — (CVSS 8.8)
• CVE-2010-4240 — (CVSS 6.1)
• CVE-2010-4239 — (CVSS 9.8)
• CVE-2019-15314 — (CVSS 5.4)
• CVE-2018-20719 — (CVSS 8.8)
• CVE-2018-14850 — (CVSS 5.4)
• CVE-2018-14849 — (CVSS 5.4)
• CVE-2018-7290 — (CVSS 5.4)
• CVE-2018-7303 — (CVSS 5.4)
• CVE-2018-7188 — (CVSS 5.4)
• CVE-2016-7394 — (CVSS 6.1)
• CVE-2017-14925 — (CVSS 8.0)
• CVE-2017-14924 — (CVSS 8.0)
• CVE-2017-9145 — (CVSS 6.1)
• CVE-2017-9305 — (CVSS 6.1)
• CVE-2016-10143 — (CVSS 7.5)
• CVE-2016-9889 — (CVSS 6.1)