Skip to content
Pluginsglpi vulnerabilities
Newest
-
pluginsglpi datainjection
GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import
CVE-2026-11321
7.1 High
-
pluginsglpi tag
Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge Rendering
CVE-2026-53987
7.3 High
-
pluginsglpi fields
Fields GLPI plugin vulnerable to RCE in dropdown generation
CVE-2026-23489
Public exploit
9.1 Critical
-
glpi-project more reporting, pluginsglpi mreporting +1 more
mreporting affected by a SQLI on date change
CVE-2026-22821
4.9 Medium
-
pluginsglpi databaseinventory
GLPI Database Inventory Plugin Vulnerable to Stored Object Injection
CVE-2025-65035
6.4 Medium
-
pluginsglpi databaseinventory
pluginsGLPI's Database Inventory Plugin allows any authenticated user to send agent requests
CVE-2025-53360
4.3 Medium
-
pluginsglpi escalade
Escalade GLPI Plugin Vulnerable to Improper Access Control
CVE-2025-27153
6.5 Medium
-
pluginsglpi addressing
The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
CVE-2024-53850
8.2 High
-
pluginsglpi fields
Fields GLPI plugin has an Authenticated SQL Injection
CVE-2024-45600
7.7 High
-
pluginsglpi formcreator, teclib-edition form creator +1 more
Formcreator vulnerable to stored XSS from ##FULLFORM##
CVE-2023-33971
6.1 Medium
-
glpi-project order
Order GLPI plugin vulnerable to remote code execution from authenticated user
CVE-2023-29006
8.8 High
-
pluginsglpi fields
Fields GLPI plugin vulnerable to unauthorized write access to additional fields
CVE-2023-28855
6.5 Medium
-
pluginsglpi sccm, teclib-edition system center configuration manager +1 more
SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
CVE-2021-39190
5.3 Medium
-
pluginsglpi addressing
Remote Command Execution vulnerability
CVE-2021-43779
9.9 Critical
-
glpi-project barcode
Path traversal in GLPI barcode plugin
CVE-2021-43778
Public exploit
EPSS 52.7%
9.1 Critical