Ritecms
Vulnerability activity for Ritecms: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.5HighDec 17, 2025ritecms Path traversal / file handlingCVE-2025-67174A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_page_language_file in the admin.php component1.3% likely
- 6.8MediumDec 17, 2025ritecms CSRFCVE-2025-67173A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request.
- 7.5HighDec 17, 2025ritecms Path traversal / file handlingCVE-2025-67171Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
- 6.1MediumDec 17, 2025ritecms XSSCVE-2025-67170A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.
- 5.3MediumDec 17, 2025ritecms Crypto / certificateCVE-2025-67168RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
- 7.2HighDec 17, 2025ritecms Code / command injectionCVE-2025-67172RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
Top products
- ritecms6 CVEs in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.