CVE Tools
Track your stack

Cmsimple

19 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Cmsimple, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Cmsimple CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Cmsimple CVEs per month
MonthCVEs
2024-110
2024-120
2025-014
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-125
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 19 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical211%
  • High842%
  • Medium947%

Latest CVEs

The 15 most recently published vulnerabilities affecting Cmsimple.

  1. CVE-2021-47733CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding6.1
  2. CVE-2021-47735CMSimple 5.4 Authenticated Remote Code Execution via Template Editing8.8
  3. CVE-2021-47734CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution7.8
  4. CVE-2021-47732CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input6.1
  5. CVE-2024-58280CMSimple 5.15 Remote Command Execution via Extensions Configuration8.8
  6. CVE-2024-57546An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validate link function.7.5
  7. CVE-2024-57548CMSimple 5.16 allows the user to edit log.php file via print page.9.1
  8. CVE-2024-57547Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Functionality of downloading php backup files.7.5
  9. CVE-2024-57549CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request.7.5
  10. CVE-2024-33424A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Downloads paramet...6.1
  11. CVE-2024-33423Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter un...7.4
  12. CVE-2024-32392Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component.4.5
  13. CVE-2024-32344A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter un...6.8
  14. CVE-2024-32345A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration par...7.2
  15. CVE-2021-43741CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution.9.8

Product grouping is registry-driven, with AI assist and human review. How it works