What’s Vulnerable › Products

unopim vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your unopim version is affected

Latest unopim vulnerabilities

• CVE-2026-102630 — UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host (CVSS 4.7)
• CVE-2026-85395 — UnoPim before 2.1.3 Missing Authorization on Integration Management Routes (CVSS 7.1)
• CVE-2026-82524 — UnoPim File Upload RCE via TinyMCE Image Upload Endpoint (CVSS 7.2)
• CVE-2025-55745 — UnoPim Quick Export feature is vulnerable to CSV injection (CVSS 8.8)
• CVE-2025-55741 — unopim/unopim allows unauthorized product deletion via mass-delete endpoint (CVSS 8.1)
• CVE-2025-55744 — UnoPim vulnerable to CSRF on Product edit feature and creation of other types (CVSS 4.3)
• CVE-2025-55743 — UnoPim vulnerable to remote code execution through Arbitrary File upload (CVSS 8.8)
• CVE-2025-55742 — UnoPim Stored XSS via SVG MIME/Sanitizer Bypass (CVSS 4.8)
• CVE-2024-52305 — UnoPim Stored XSS : Cookie hijacking through Create User function (CVSS 4.8)
• CVE-2024-50637 — (CVSS 5.4)