Admidio vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-111914 Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that allows authenticated users to bypaHigh 7.1 · Oct 17, 2026
• CVE-2026-111912 Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that allows authenticated members to moHigh 7.1 · Oct 17, 2026
• CVE-2026-109329 Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in High 8.5 · Oct 12, 2026
• CVE-2026-82657 Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements modules.High 8.7 · Aug 30, 2026
• CVE-2026-82655 Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php that allows unauthenticated attackers tHigh 8.7 · Aug 30, 2026
• CVE-2026-47231 Admidio is an open-source user management solution.High 8.1 · Aug 12, 2026
• CVE-2026-69093 Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration cHigh 7.1 · Aug 3, 2026
• CVE-2026-69091 Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode.High 8.7 · Aug 3, 2026
• CVE-2026-41670 Admidio is an open-source user management solution.High 8.2 · May 7, 2026
• CVE-2026-41669 Admidio is an open-source user management solution.High 8.2 · May 7, 2026
• CVE-2026-41660 Admidio is an open-source user management solution.High 7.1 · May 7, 2026
• CVE-2026-34381 Admidio is an open-source user management solution.High 7.5 · Mar 31, 2026
• CVE-2026-32817 Admidio is an open-source user management solution.Critical 9.1 · Mar 19, 2026
• CVE-2026-32813 Admidio is an open-source user management solution.High 8 · Mar 19, 2026
• CVE-2026-32756 Admidio is an open-source user management solution.High 8.8 · Mar 19, 2026
• CVE-2025-62617 Admidio is an open-source user management solution.High 7.2 · Oct 22, 2025
• CVE-2024-38529 Admidio is a free, open source user management system for websites of organizations and groups.Critical 9 · Jul 29, 2024
• CVE-2024-37906 Admidio is a free, open source user management system for websites of organizations and groups.Critical 9.9 · Jul 29, 2024
• CVE-2023-3692 Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10.High 7.2 · Jul 15, 2023
• CVE-2023-3302 Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.High 7.8 · Jun 23, 2023
• CVE-2022-0991 Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9.High 7.1 · Mar 19, 2022
• CVE-2021-43810 Admidio is a free open source user management system for websites of organizations and groups.High 8.8 · Dec 7, 2021
• CVE-2021-32630 Admidio is a free, open source user management system for websites of organizations and groups.Critical 9.6 · May 20, 2021
• CVE-2020-11004 SQL Injection was discovered in Admidio before version 3.3.13.High 7.7 · Apr 24, 2020
• CVE-2017-6492 SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5.High 7.2 · Mar 5, 2017