CVE Tools
Track your stack

Admidio/admidio

23 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Admidio/admidio, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Admidio/admidio CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Admidio/admidio CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-101
2025-110
2025-120
2026-010
2026-020
2026-039
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 23 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical210%
  • High630%
  • Medium1050%
  • Low210%

Latest CVEs

The 15 most recently published vulnerabilities affecting Admidio/admidio.

  1. CVE-2026-32813Admidio: Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)8.0
  2. CVE-2026-32812Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint6.8
  3. CVE-2026-32757Admidio: HTMLPurifier Bypass in eCard Message Allows HTML Email Injection5.4
  4. CVE-2026-32756Admidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files Module8.8
  5. CVE-2026-32755Admidio is Missing CSRF Protection on Role Membership Date Changes5.7
  6. GHSA-g375-5wmp-xr78Admidio is Missing Authorization on Forum Topic and Post Deletion—
  7. GHSA-rmpj-3x5m-9m5fAdmidio is Missing Authorization and CSRF Protection on Document and Folder Deletion—
  8. GHSA-wwg8-6ffr-h4q2Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions—
  9. CVE-2026-30927Admidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameter5.4
  10. CVE-2025-62617Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality7.2
  11. CVE-2024-47836Admidio vulnerable to HTML Injection In The Messages Section3.5
  12. CVE-2024-38529Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment9.0
  13. CVE-2024-37906Admidio has Blind SQL Injection in ecard_send.php9.9
  14. CVE-2023-47380Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).6.1
  15. CVE-2023-4190Insufficient Session Expiration in admidio/admidio6.5

Product grouping is registry-driven, with AI assist and human review. How it works