payloadcms records
11 published records for vendor payloadcms.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-639 Authorization Bypass Through User-Controlled Key1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2022-27952No exploit | An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafpayloadcms · payload · CWE-434 | Critical9.8 | — | 2.3% | Apr 12, 2022 |
39Monitor | CVE-2026-25544Proof of concept | Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapterspayloadcms · payload · CWE-89 | Critical9.8 | — | 0.9% | Feb 6, 2026 |
36Monitor | CVE-2026-34751No exploit | Payload has Unvalidated Input in Password Recovery Endpointspayloadcms · payload · CWE-472 | Critical9.1 | — | 0.4% | Apr 1, 2026 |
34Monitor | CVE-2026-34748No exploit | @payloadcms/next has Stored XSS in Admin Panelpayloadcms · payload · CWE-79 | High8.7 | — | 0.4% | Apr 1, 2026 |
32Monitor | CVE-2026-34747No exploit | Payload has an SQL Injection via Query Handlingpayloadcms · payload · CWE-89 | High8.2 | — | 0.4% | Apr 1, 2026 |
30Monitor | CVE-2026-34746No exploit | Payload has Authenticated SSRF via Upload Functionalitypayloadcms · payload · CWE-918 | High7.7 | — | 0.4% | Apr 1, 2026 |
26Monitor | CVE-2023-30843No exploit | Payload's hidden fields can be leaked on readable collectionspayloadcms · payload · CWE-200 | Medium6.5 | — | 0.6% | Apr 26, 2023 |
26Monitor | CVE-2026-34750No exploit | Payload has Insufficient Filename Validation in Client-Upload Signed-URL Endpointspayloadcms · payload · CWE-22 | Medium6.5 | — | 0.4% | Apr 1, 2026 |
21Monitor | CVE-2026-25574No exploit | Payload Affected by Cross-Collection IDOR in payload-preferences Access Control (Multi-Auth Environments)payloadcms · payload · CWE-639 | Medium5.4 | — | 0.2% | Feb 6, 2026 |
21Monitor | CVE-2026-34749No exploit | Payload has a CSRF Protection Bypass in Authentication Flowpayloadcms · payload · CWE-352 | Medium5.4 | — | 0.2% | Apr 1, 2026 |
19Monitor | CVE-2026-27567No exploit | Payload has Server-Side Request Forgery (SSRF) in External File URL Uploadspayloadcms · payload · CWE-918 | Medium4.8 | — | 0.4% | Feb 24, 2026 |
- CVE-2022-2795240Plan
An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a craf
CriticalCVSS 9.8No exploitEPSS 2%payloadcms · payloadApr 12, 2022
- CVE-2026-2554439Monitor
Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters
CriticalCVSS 9.8Proof of conceptEPSS 1%payloadcms · payloadFeb 6, 2026
- CVE-2026-3475136Monitor
Payload has Unvalidated Input in Password Recovery Endpoints
CriticalCVSS 9.1No exploitEPSS 0%payloadcms · payloadApr 1, 2026
- CVE-2026-3474834Monitor
@payloadcms/next has Stored XSS in Admin Panel
HighCVSS 8.7No exploitEPSS 0%payloadcms · payloadApr 1, 2026
- CVE-2026-3474732Monitor
Payload has an SQL Injection via Query Handling
HighCVSS 8.2No exploitEPSS 0%payloadcms · payloadApr 1, 2026
- CVE-2026-3474630Monitor
Payload has Authenticated SSRF via Upload Functionality
HighCVSS 7.7No exploitEPSS 0%payloadcms · payloadApr 1, 2026
- CVE-2023-3084326Monitor
Payload's hidden fields can be leaked on readable collections
MediumCVSS 6.5No exploitEPSS 1%payloadcms · payloadApr 26, 2023
- CVE-2026-3475026Monitor
Payload has Insufficient Filename Validation in Client-Upload Signed-URL Endpoints
MediumCVSS 6.5No exploitEPSS 0%payloadcms · payloadApr 1, 2026
- CVE-2026-2557421Monitor
Payload Affected by Cross-Collection IDOR in payload-preferences Access Control (Multi-Auth Environments)
MediumCVSS 5.4No exploitEPSS 0%payloadcms · payloadFeb 6, 2026
- CVE-2026-3474921Monitor
Payload has a CSRF Protection Bypass in Authentication Flow
MediumCVSS 5.4No exploitEPSS 0%payloadcms · payloadApr 1, 2026
- CVE-2026-2756719Monitor
Payload has Server-Side Request Forgery (SSRF) in External File URL Uploads
MediumCVSS 4.8No exploitEPSS 0%payloadcms · payloadFeb 24, 2026