[ Vendor · 2 CVEs ]
SPIP
CVEs affecting SPIP published in the last 30 days, plus any SPIP CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109378 | 12 Oct 2026 | CVSS 4.3 | SPIPSPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrire/inc/distant.php that follows up to 10 redirects… | |
| CVE-2026-104070 | 6 Oct 2026 | CVSS 9.8 | SPIP Crayons PluginThe Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary… |