Known vulnerabilities in Craft CMS 5.10.12

Software: Craft CMS
Version: 5.10.12
Software CPE: cpe:2.3:a:pixel_and_tonic:craft_cms:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Craft CMS version 5.10.12 Craft CMS 5.10.12 is affected by 6 vulnerabilities: 5 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146757 - Missing Authorization
CWE-862 Medium
No
No
5.10.13 02.09.2026 SB2026090260
#VU146747 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
5.10.13 02.09.2026 SB2026090260
#VU146746 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
5.10.13 02.09.2026 SB2026090260
#VU146745 - Not Failing Securely (\'Failing Open\')
CWE-636 Medium
No
No
5.10.13 02.09.2026 SB2026090260
#VU146743 - Improper Neutralization of Special Elements Used in a Template Engine
CWE-1336 Medium
No
No
4.18.6, 5.10.13 02.09.2026 SB2026090260
#VU146742 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
5.11.0 02.09.2026 SB2026090259