Craft CMS Craft CMS: known exploited vulnerabilities
Entries4
Ransomware-linked0
First added2025-02-20
Latest2026-03-20
EPSS compared
99.7%
97.4%
21.7%
1.3%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-32432 | Craft CMS Craft CMS | 2026-03-20 | 99.7% | Unknown |
| CVE-2025-35939 | Craft CMS Craft CMS | 2025-06-02 | 1.3% | Unknown |
| CVE-2024-56145 | Craft CMS Craft CMS | 2025-06-02 | 97.4% | Unknown |
| CVE-2025-23209 | Craft CMS Craft CMS | 2025-02-20 | 21.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.