Skip to content
Threat Feed
medium advisory

Craft CMS Security Updates

Craft CMS has released security updates for multiple products to address vulnerabilities in the core CMS platform and the Commerce-mollie plugin.

Triage facts

Revision 1
Applicability
CMS (< 4.18.9), CMS (< 5.11.2) +1
Evidence
Unknown
Severity
Medium
Action
Elevated
Sources
4 public sources
Freshness
Revision 1Oct 27, 03:53 UTC
Source quality
A1Roughly even chance

Craft CMS has released security updates to address multiple vulnerabilities affecting the core CMS platform and the Commerce-mollie plugin. Administrators are advised to update their installations to the specified versions to mitigate potential security risks. The specific nature of the vulnerabilities remains undisclosed in the current advisory.

Recommendation

  • Upgrade CMS installations to version 4.18.9 or 5.11.2 immediately.
  • Upgrade the Commerce-mollie plugin to version 4.4.3.
  • Review the official Craft CMS security advisory page for future disclosures or technical details.

Mitigations

Upgrade CMS to 4.18.9 or 5.11.2 and Commerce-mollie to 4.4.3

immediate IT Operations

Vulnerabilities in Craft CMS core and Commerce-mollie plugin