Unopim vulnerabilities

Products

• Unopim 10

Newest

• unopim UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host CVE-2026-102630 2.3 LowSeptember 29, 2026
• unopim UnoPim before 2.1.3 Missing Authorization on Integration Management Routes CVE-2026-85395 7.1 HighSeptember 3, 2026
• unopim UnoPim File Upload RCE via TinyMCE Image Upload Endpoint CVE-2026-82524 8.6 HighSeptember 2, 2026
• unopim UnoPim Quick Export feature is vulnerable to CSV injection CVE-2025-55745 Fix available 2.5 LowAugust 22, 2025
• unopim unopim/unopim allows unauthorized product deletion via mass-delete endpoint CVE-2025-55741 Fix available 8.1 HighAugust 22, 2025
• unopim UnoPim vulnerable to CSRF on Product edit feature and creation of other types CVE-2025-55744 Fix available 6.9 MediumAugust 21, 2025
• unopim UnoPim vulnerable to remote code execution through Arbitrary File upload CVE-2025-55743 Fix available 7.3 HighAugust 21, 2025
• unopim UnoPim Stored XSS via SVG MIME/Sanitizer Bypass CVE-2025-55742 Fix available 8.0 HighAugust 21, 2025
• unopim UnoPim Stored XSS : Cookie hijacking through Create User function CVE-2024-52305 Fix available 6.5 MediumNovember 13, 2024
• unopim UnoPim Cross-site Scripting vulnerability CVE-2024-50637 Fix available 5.4 MediumNovember 6, 2024