Thinkcmf vulnerabilities

Products

• Thinkcmf 15

Newest

• naichen thinkcmf ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API CVE-2026-111352 8.7 HighOctober 15, 2026
• thinkcmf ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php. CVE-2024-31615 9.8 CriticalApril 25, 2024
• thinkcmf ThinkCMF Cross-site Scripting Vulnerability CVE-2020-25915 Fix available 5.4 MediumAugust 11, 2023
• thinkcmf ThinkCMF Stored Cross-Site Scripting (XSS) CVE-2022-40849 Fix available 5.4 MediumDecember 1, 2022
• thinkcmf ThinkCMF Cross Site Request Forgery (CSRF) vulnerability CVE-2022-40489 Fix available 8.8 HighDecember 1, 2022
• thinkcmf Incorrect Authorization in thinkcmf CVE-2021-40616 Fix available 6.5 MediumJune 14, 2022
• thinkcmf An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted... CVE-2020-20601 9.8 CriticalDecember 22, 2021
• thinkcmf ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability CVE-2020-18151 Fix available 6.5 MediumJuly 14, 2021
• thinkcmf ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal... CVE-2019-7580 8.8 HighFebruary 7, 2019
• thinkcmf app\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers to... CVE-2019-6713 9.8 CriticalJanuary 23, 2019
• thinkcmf ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is... CVE-2018-19898 8.8 HighDecember 6, 2018
• thinkcmf ThinkCMF X2.2.2 has SQL Injection via the function _listorders() in AdminbaseController.class.php... CVE-2018-19897 7.2 HighDecember 6, 2018
• thinkcmf ThinkCMF X2.2.2 has SQL Injection via the function delete() in SlideController.class.php and is... CVE-2018-19896 7.2 HighDecember 6, 2018
• thinkcmf ThinkCMF X2.2.2 has SQL Injection via the function edit_post() in NavController.class.php and is... CVE-2018-19895 7.2 HighDecember 6, 2018
• thinkcmf ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in... CVE-2018-19894 7.2 HighDecember 6, 2018
• thinkcmf thinkcmfx ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User... CVE-2018-16141 6.5 MediumAugust 30, 2018