CVE Tools
Track your stack

Yeswiki

57 CVEs tracked since 2025. Since Apr 2025, none of them reached CISA KEV.

Yeswiki CVEs per month

Apr 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Yeswiki CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0480
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-09120
2026-10370

Products

The products that kept showing up in Yeswiki's monthly top three, with their CVEs summed over those months.

  1. Yeswiki573 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Yeswiki.

  1. CVE-2026-105224YesWiki before 4.6.7 Stored XSS via Bazar valeur Action5.4
  2. CVE-2026-104473YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpages6.1
  3. CVE-2026-104472YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler7.5
  4. CVE-2026-104471YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import7.2
  5. CVE-2026-104470YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter5.0
  6. CVE-2026-104468YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordAction4.8
  7. CVE-2026-104469YesWiki before 4.6.7 Session Fixation via Login in AuthController.php6.8
  8. CVE-2026-104467YesWiki before 4.6.7 Authorization Bypass via Public API Mode8.1
  9. CVE-2026-104466YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute5.4
  10. CVE-2026-104465YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handler6.1
  11. CVE-2026-104464YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter8.6
  12. CVE-2026-104462YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter7.5
  13. CVE-2026-104463YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox7.0
  14. CVE-2026-104461YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileField5.4
  15. CVE-2026-104459YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handle6.5

The record

Peak rank
#15 in Oct 2026
Busiest month shown
Oct 2026, 37 CVEs
Months with a KEV entry
0 since Apr 2025
Monthly snapshots
3 since 2025
Yeswiki's full record, month by month