Advisories · Technology

GetSimpleCMS.

Every CVE that names GetSimpleCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-53952 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw
- GetSimpleCMS-CE
- GetSimpleCMS
- Broken access control
- Authentication bypass
Not analysed yet 11 Sept 2026
CVE-2024-11125 CVE record

CVSS 6.9 Medium

GetSimpleCMS profile.php cross-site request forgery
- GetSimpleCMS
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 12 Nov 2024
CVE-2023-6188 CVE record

CVSS 4.7 Medium

GetSimpleCMS theme-edit.php code injection
- GetSimpleCMS
- Code injection
Not analysed yet 17 Nov 2023