Vulnerabilities Craft CMS Zero-Day Exploited to Compromise Hundreds of Websites Threat actors have exploited a zero-day vulnerability in Craft CMS to execute PHP code on hundreds of websites. Ionut ArghireApril 28, 2025
Vulnerabilities CISA Warns of Attacks Exploiting Craft CMS Vulnerability CISA has added a Craft CMS flaw tracked as CVE-2025-23209 to its Known Exploited Vulnerabilities (KEV) catalog. Eduard KovacsFebruary 21, 2025