Medium
CVE-2026-34384
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 50
Reset filters
Medium
CVE-2026-34382
Admidio has Missing CSRF Protections on Custom List Deletion in mylist_function.php
High
CVE-2026-34381
Admidio allows Unauthenticated Access to Role-Restricted documents via neutralized .htaccess
High
CVE-2026-32813
Admidio has a Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)
Medium
CVE-2026-32818
Admidio is Missing Authorization on Forum Topic and Post Deletion
Medium
CVE-2026-32757
Admidio has an HTMLPurifier Bypass in eCard Message Allows HTML Email Injection
Critical
CVE-2026-32817
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion
Medium
CVE-2026-32812
Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint
Medium
CVE-2026-32755
Admidio is Missing CSRF Protection on Role Membership Date Changes
Medium
CVE-2026-32816
Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions
High
CVE-2026-32756
File Upload(RCE) Vulnerability in admidio
Medium
CVE-2026-30927
Admidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameter
High
CVE-2025-62617
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
Low
CVE-2024-47836
Admidio Vulnerable to HTML Injection In The Messages Section
Critical
CVE-2024-38529
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Critical
CVE-2024-37906
Admidio has Blind SQL Injection in ecard_send.php
Medium
CVE-2023-47380
Cross-site Scripting in Admidio
Medium
CVE-2023-4190
Admidio Insufficient Session Expiration vulnerability
Medium
CVE-2023-3692
Admidio vulnerable to Unrestricted Upload of File with Dangerous Type
High
CVE-2023-3302
Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability
Medium
CVE-2023-3304
Admidio Improper Access Control vulnerability
Low
CVE-2023-3303
Admidio Improper Access Control vulnerability
Medium
CVE-2023-3109
Admidio vulnerable to Cross-site Scripting
Medium
CVE-2022-23896
Cross-site Scripting in admidio
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.