Skip to content
Noroxi

emlog records

93 published records for vendor emlog.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
11
With a fix record
3.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

93 records
  • CVE-2023-44974
    45Plan

    An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via

    CriticalCVSS 9.8No exploitEPSS 19%

    emlog · emlogOct 3, 2023

  • CVE-2021-31737
    40Plan

    emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php.

    CriticalCVSS 9.8No exploitEPSS 4%

    emlog · emlogMay 6, 2021

  • CVE-2020-21585
    40Plan

    Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.

    CriticalCVSS 9.8No exploitEPSS 3%

    emlog · emlogApr 2, 2021

  • CVE-2021-40883
    40Plan

    A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.

    CriticalCVSS 9.8No exploitEPSS 3%

    emlog · emlogDec 14, 2021

  • CVE-2019-16868
    40Plan

    emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traver

    CriticalCVSS 9.8No exploitEPSS 3%

    emlog · emlogSep 25, 2019

  • CVE-2023-43291
    40Plan

    Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php com

    CriticalCVSS 9.8No exploitEPSS 2%

    emlog · emlogSep 27, 2023

  • CVE-2022-23379
    39Monitor

    Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().

    CriticalCVSS 9.8No exploitEPSS 1%

    emlog · emlogFeb 4, 2022

  • CVE-2023-44973
    39Monitor

    An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code v

    CriticalCVSS 9.8No exploitEPSS 1%

    emlog · emlogOct 3, 2023

  • CVE-2025-29401
    39Monitor

    An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via

    CriticalCVSS 9.8No exploitEPSS 1%

    emlog · emlogMar 19, 2025

  • CVE-2025-25783
    39Monitor

    An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via

    CriticalCVSS 9.8No exploitEPSS 1%

    emlog · emlogFeb 26, 2025

  • CVE-2026-22799
    37Monitor

    emlog Arbitrary File Upload Vulnerability

    CriticalCVSS 9.3No exploitEPSS 1%

    emlog · emlogJan 12, 2026

  • CVE-2025-61318
    36Monitor

    Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.

    CriticalCVSS 9.1No exploitEPSS 1%

    emlog · emlogDec 8, 2025

  • CVE-2021-30081
    35Monitor

    An issue was discovered in emlog 6.0.0stable.

    HighCVSS 8.8No exploitEPSS 1%

    emlog · emlogMay 24, 2021

  • CVE-2025-47785
    35Monitor

    EMLOG SQL Injection Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    emlog · emlogMay 15, 2025

  • CVE-2025-47787
    35Monitor

    Emlog Pro Contains a File Upload Vulnerability

    HighCVSS 8.9No exploitEPSS 1%

    emlog · emlogMay 15, 2025

  • CVE-2018-18316
    35Monitor

    emlog v6.0.0 has CSRF via the admin/user.php?action=new URI.

    HighCVSS 8.8No exploitEPSS 1%

    emlog · emlogOct 15, 2018

  • CVE-2025-61930
    35Monitor

    Emlog Pro has CSRF issue that Enables Admin Password Reset

    HighCVSS 8.8No exploitEPSS 0%

    emlog · emlogOct 10, 2025

  • CVE-2026-34228
    34Monitor

    Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write

    HighCVSS 8.7No exploitEPSS 0%

    emlog · emlogApr 3, 2026

  • CVE-2020-19028
    30Monitor

    *File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/p

    HighCVSS 7.5No exploitEPSS 1%

    emlog · emlogJun 5, 2023

  • CVE-2025-30372
    30Monitor

    Emlog Pro contains an SQL injection vulnerability.

    HighCVSS 7.7No exploitEPSS 1%

    emlog · emlogMar 28, 2025

  • CVE-2026-21433
    30Monitor

    Emlog vulnerable to Server-Side Request Forgery (SSRF)

    HighCVSS 7.7No exploitEPSS 0%

    emlog · emlogJan 2, 2026

  • CVE-2023-39121
    29Monitor

    emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.

    HighCVSS 7.2Proof of conceptEPSS 3%

    emlog · emlogAug 3, 2023

  • CVE-2025-25823
    29Monitor

    A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cra

    HighCVSS 7.3No exploitEPSS 0%

    emlog · emlogFeb 26, 2025

  • CVE-2026-31954
    29Monitor

    Emlog asynchronous media file deletion missing CSRF protection

    HighCVSS 7.3No exploitEPSS 0%

    emlog · emlogMar 11, 2026

  • CVE-2022-42189
    28Monitor

    Emlog Pro 1.6.0 plugins upload suffers from a remote code execution (RCE) vulnerability.

    HighCVSS 7.2No exploitEPSS 2%

    emlog · emlogOct 21, 2022