Publify Project maintains a blogging and content-management platform whose vulnerability profile concentrates in access-control and input-handling weaknesses, including improper authorization, authorization bypass, and cross-site scripting flaws that affect the core Publify application. Vulnerabilities affecting this vendor skew toward serious outcomes, reflecting the web-application context and the authentication and trust-boundary logic typical of publishing systems where authorization failures carry direct impact to content integrity and user data exposure. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Publify Project over time
Signals from CVEs in this vendor scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-1812CRITICAL Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 9.8 | 48 | NO | NO |
CVE-2023-0299CRITICAL Improper Input Validation in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-0569MEDIUM Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10. | Jan 29, 2023 | 6.5 | 23 | NO | NO |
CVE-2022-2815MEDIUM Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 6.5 | 23 | NO | NO |
CVE-2022-0578MEDIUM Code Injection in GitHub repository publify/publify prior to 9.2.8. | May 16, 2022 | 6.5 | 23 | NO | NO |
CVE-2022-0574MEDIUM Improper Access Control in GitHub repository publify/publify prior to 9.2.8. | May 16, 2022 | 6.5 | 23 | NO | NO |
CVE-2021-25973MEDIUM In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end re | Nov 2, 2021 | 6.5 | 22 | NO | NO |
CVE-2022-1811MEDIUM Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9. | May 23, 2022 | 5.4 | 20 | NO | NO |
CVE-2021-25974MEDIUM In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/artic | Nov 10, 2021 | 5.4 | 20 | NO | NO |
CVE-2022-0524HIGH Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. | Feb 8, 2022 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (15 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Publify Project.
Media articles that mention a CVE ID that affects a product developed by Publify Project — matched by CVE ID, not by vendor name.