Craft CMS 5
Craft CMS 5 gets security updates until 31/12/2031.
Latest version: 5.11.5.1, released on 08/10/2026
End of support: 31/12/2031
No known vulnerability open in 5.11.5.1
Vulnerabilities in Craft CMS 5
52 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 02/11/2026.
- CVE-2025-32432, CVSS 3.1: 10.0, actively exploited: fixed in 5.6.17
- CVE-2024-56145, CVSS 4.0: 9.3, actively exploited: fixed in 5.5.2
- CVE-2025-23209, CVSS 3.1: 8.1, actively exploited: fixed in 5.5.8
- CVE-2025-35939, CVSS 4.0: 6.9, actively exploited: fixed in 5.7.5
- CVE-2026-28783, CVSS 4.0: 9.4: fixed in 5.9.0
- CVE-2026-28697, CVSS 4.0: 9.4: fixed in 5.9.0
- CVE-2026-31858, CVSS 4.0: 8.7: fixed in 5.9.9
- CVE-2026-28696, CVSS 4.0: 8.7: fixed in 5.9.0
- CVE-2026-25495, CVSS 4.0: 8.7: fixed in 5.8.22
- CVE-2026-33157, CVSS 4.0: 8.6: fixed in 5.9.13
- CVE-2026-32264, CVSS 4.0: 8.6: fixed in 5.9.11
- CVE-2026-32263, CVSS 4.0: 8.6: fixed in 5.9.11
- CVE-2026-28784, CVSS 4.0: 8.6: fixed in 5.9.0
- CVE-2026-25498, CVSS 4.0: 8.6: fixed in 5.8.22
- CVE-2026-25497, CVSS 4.0: 8.6: fixed in 5.9.0
- CVE-2025-68455, CVSS 4.0: 8.6: fixed in 5.8.21
- CVE-2026-31857, CVSS 4.0: 8.1: fixed in 5.9.9
- CVE-2026-32267, CVSS 4.0: 7.7: fixed in 5.9.12
- CVE-2026-28695, CVSS 4.0: 7.5: fixed in 5.9.0
- CVE-2024-41800, CVSS 3.1: 7.5: fixed in 5.2.3
- CVE-2025-46731, CVSS 4.0: 7.3: fixed in 5.6.15
- CVE-2024-52293, CVSS 3.1: 7.2: fixed in 5.4.3
- CVE-2024-52291, CVSS 3.1: 7.2: fixed in 5.4.6
- CVE-2026-28781, CVSS 4.0: 7.1: fixed in 5.9.0
- CVE-2026-27127, CVSS 4.0: 7.0: fixed in 5.8.23
- CVE-2025-68456, CVSS 4.0: 7.0: fixed in 5.8.21
- CVE-2026-33159, CVSS 4.0: 6.9: fixed in 5.9.14
- CVE-2026-31859, CVSS 4.0: 6.9: fixed in 5.9.7
- CVE-2026-29069, CVSS 4.0: 6.9: fixed in 5.9.0
- CVE-2026-27128, CVSS 4.0: 6.9: fixed in 5.8.23
- CVE-2026-25494, CVSS 4.0: 6.9: fixed in 5.8.22
- CVE-2026-25493, CVSS 4.0: 6.9: fixed in 5.8.22
- CVE-2024-52292, CVSS 3.1: 6.5: fixed in 5.4.9
- CVE-2025-57811, CVSS 4.0: 6.1: fixed in 5.8.7
- CVE-2026-27126, CVSS 4.0: 5.9: fixed in 5.8.23
- CVE-2026-27129, CVSS 4.0: 5.7: fixed in 5.8.23
- CVE-2026-33051, CVSS 4.0: 5.3: fixed in 5.9.11
- CVE-2026-32262, CVSS 4.0: 5.3: fixed in 5.9.11
- CVE-2026-28782, CVSS 4.0: 5.3: fixed in 5.9.0
- CVE-2026-25492, CVSS 4.0: 5.3: fixed in 5.8.22
- CVE-2025-68454, CVSS 4.0: 5.2: fixed in 5.8.21
- CVE-2025-54417, CVSS 4.0: 5.2: fixed in 5.8.4
- CVE-2025-68437, CVSS 4.0: 5.0: fixed in 5.8.21
- CVE-2026-33162, CVSS 4.0: 4.9: fixed in 5.9.14
- CVE-2026-33158, CVSS 4.0: 4.9: fixed in 5.9.14
- CVE-2025-68436, CVSS 4.0: 4.9: fixed in 5.8.21
- CVE-2026-25496, CVSS 4.0: 4.8: fixed in 5.8.22
- CVE-2024-45406, CVSS 3.1: 4.8: fixed in 5.1.2
- CVE-2026-33160, CVSS 4.0: 2.7: fixed in 5.9.14
- CVE-2026-29113, CVSS 4.0: 2.3: fixed in 5.9.7
- CVE-2026-25491, CVSS 4.0: 1.9: fixed in 5.8.21
- CVE-2026-33161, CVSS 4.0: 1.3: fixed in 5.9.14
Get notified
Add Craft CMS with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Craft CMS 5