Publify
Vendor:
First CVE: Jan 9, 2020 · Active for 6 years
15
Total CVEs
More Total CVEs than 91% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 32% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Publify over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 9, 2020
6 years ago
Most Recent CVE
Mar 28, 2025
486 days ago
CVE Severity & Scoring
Publify15 CVEs
73%
13%
13%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network15 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None11 (73.3%)
Unknown0 (0.0%)
Required4 (26.7%)
Privileges Required
Low7 (46.7%)
High1 (6.7%)
None7 (46.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-1812CRITICAL Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 9.8 | 48 | NO | NO |
CVE-2023-0299CRITICAL Improper Input Validation in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-0569MEDIUM Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10. | Jan 29, 2023 | 6.5 | 23 | NO | NO |
CVE-2022-2815MEDIUM Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 6.5 | 23 | NO | NO |
CVE-2022-0578MEDIUM Code Injection in GitHub repository publify/publify prior to 9.2.8. | May 16, 2022 | 6.5 | 23 | NO | NO |
CVE-2022-0574MEDIUM Improper Access Control in GitHub repository publify/publify prior to 9.2.8. | May 16, 2022 | 6.5 | 23 | NO | NO |
CVE-2021-25973MEDIUM In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end re | Nov 2, 2021 | 6.5 | 22 | NO | NO |
CVE-2022-1811MEDIUM Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9. | May 23, 2022 | 5.4 | 20 | NO | NO |
CVE-2021-25974MEDIUM In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/artic | Nov 10, 2021 | 5.4 | 20 | NO | NO |
CVE-2022-0524HIGH Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. | Feb 8, 2022 | 7.5 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (15 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (15 CVEs).
Media Mentions
Signals from CVEs in this product scope (15 CVEs).
Top CNAs Publishing CVEs For Publify
Top CWEs
Versions
No cataloged versions.