Advisories · Technology

processmaker.

Every CVE that names processmaker among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107803 CVE record

CVSS 6.5 Medium

ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter
- processmaker
- SQL injection
Not analysed yet 9 Oct 2026
CVE-2021-47978 CVE record

CVSS 6.9 Medium

ProcessMaker 3.5.4 Local File Inclusion via Path Traversal
- ProcessMaker
- File inclusion
Not analysed yet 16 May 2026
CVE-2025-34097 CVE record

CVSS 8.6 High

ProcessMaker < 3.5.4 Authenticated Plugin Upload RCE
- ProcessMaker
- Unrestricted file upload
Not analysed yet 10 Jul 2025
CVE-2020-13526 CVE record

CVSS 6.4 Medium

SQL injection in ProcessMaker
- ProcessMaker
- SQL injection
Not analysed yet 10 Dec 2020
CVE-2020-13525 CVE record

CVSS 6.4 Medium

SQL injection in ProcessMaker
- ProcessMaker
- SQL injection
Not analysed yet 3 Dec 2020