VendorsPublify Projectpublifyany version
Vulnerabilities

Publify Project Publify any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2022-1810
Authorization Bypass Through User-Controlled Key in publify/publify
Published 2022-05-23 · Modified
9.9EPSS 0.008
CVE-2022-1812
Integer Overflow or Wraparound in publify/publify
Published 2023-01-14 · Modified
9.8EPSS 0.308
CVE-2023-0299
Improper Input Validation in publify/publify
Published 2023-01-14 · Modified
9.8EPSS 0.009
CVE-2022-1811
Unrestricted Upload of File with Dangerous Type in publify/publify
Published 2022-05-23 · Modified
9.1EPSS 0.008
CVE-2022-1553
Leaking password protected articles content due to improper access control in publify/publify
Published 2022-05-16 · Modified
8.8EPSS 0.012
CVE-2023-0569
Weak Password Requirements in publify/publify
Published 2023-01-29 · Modified
8.1EPSS 0.007
CVE-2022-0524
Business Logic Errors in publify/publify
Published 2022-02-08 · Modified
7.5EPSS 0.016
CVE-2022-0578
Code Injection in publify/publify
Published 2022-05-16 · Modified
6.5EPSS 0.009
CVE-2022-0574
Improper Access Control in publify/publify
Published 2022-05-16 · Modified
6.5EPSS 0.008
CVE-2021-25973
Publify - Improper Authorization Leads to Guest Signup Restriction Bypass
Published 2021-11-02 · Modified
6.5EPSS 0.008
CVE-2022-2815
Insecure Storage of Sensitive Information in publify/publify
Published 2023-01-14 · Modified
6.5EPSS 0.006
CVE-2021-25974
Publify - Stored Cross-Site Scripting (XSS) in Editor
Published 2021-11-10 · Modified
5.4EPSS 0.006
CVE-2021-25975
Publify - Stored Cross-Site Scripting (XSS) due to Unrestricted File Upload
Published 2021-11-10 · Modified
5.4EPSS 0.006