Craft CMS: versions, end of support and vulnerabilities
Release branches of Craft CMS with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 97 vulnerabilities for Craft CMS, 4 of them actively exploited. Last checked on 02/11/2026.
Release branches
Craft CMS 5
Latest version: 5.11.5.1, released on 08/10/2026
End of support: 31/12/2031
No known vulnerability open in 5.11.5.1
Craft CMS 4
Latest version: 4.18.9, released on 17/09/2026
End of support: 30/04/2026
No known vulnerability open in 4.18.9
Craft CMS 3
Latest version: 3.9.15, released on 10/04/2025
End of support: 30/04/2024
12 known vulnerabilities open in 3.9.15
Craft CMS 2
Latest version: 2.9.2, released on 06/03/2020
End of support: 31/01/2022
18 known vulnerabilities open in 2.9.2
Most recent vulnerabilities of Craft CMS
- CVE-2026-33162, CVSS 4.0: 4.9, 24/03/2026
- CVE-2026-33161, CVSS 4.0: 1.3, 24/03/2026
- CVE-2026-33160, CVSS 4.0: 2.7, 24/03/2026
- CVE-2026-33159, CVSS 4.0: 6.9, 24/03/2026
- CVE-2026-33158, CVSS 4.0: 4.9, 24/03/2026
- CVE-2026-33157, CVSS 4.0: 8.6, 24/03/2026
- CVE-2026-33051, CVSS 4.0: 5.3, 20/03/2026
- CVE-2026-32267, CVSS 4.0: 7.7, 16/03/2026
- CVE-2026-32264, CVSS 4.0: 8.6, 16/03/2026
- CVE-2026-32263, CVSS 4.0: 8.6, 16/03/2026
Get notified
Add Craft CMS with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Craft CMS