{"schema_version":1,"title":"Admidio vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 19 vulnerabilities in Admidio: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-53760, was published on 4 September 2026.","url":"https://junglewise.ai/threats/technologies/admidio","json_url":"https://junglewise.ai/threats/technologies/admidio.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/admidio","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":4,"all_time":19,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":5,"last_90_days":5,"last_365_days":19},"latest":[{"cve":"CVE-2026-53760","cvss":5.2,"epss":0.0017,"slug":"cve-2026-53760-admidio-csrf-in-plugin-management-module","title":"Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installati","severity":"medium","exploited":false,"published_at":"2026-09-04T18:17:52.77+00:00","url":"https://junglewise.ai/threats/cve-2026-53760-admidio-csrf-in-plugin-management-module"},{"cve":"CVE-2026-82658","cvss":4.3,"epss":0.0031,"slug":"cve-2026-82658-admidio-broken-access-control-in-profile-function-php","title":"Admidio broken access control in profile_function.php","severity":"medium","exploited":false,"published_at":"2026-08-30T15:16:46.747+00:00","url":"https://junglewise.ai/threats/cve-2026-82658-admidio-broken-access-control-in-profile-function-php"},{"cve":"CVE-2026-82657","cvss":7.5,"epss":0.0045,"slug":"cve-2026-82657-admidio-rss-feed-authentication-bypass-in-forum-and-announcements","title":"Admidio RSS feed authentication bypass in forum and announcements","severity":"high","exploited":false,"published_at":"2026-08-30T15:16:46.607+00:00","url":"https://junglewise.ai/threats/cve-2026-82657-admidio-rss-feed-authentication-bypass-in-forum-and-announcements"},{"cve":"CVE-2026-82656","cvss":2.6,"epss":0.0044,"slug":"cve-2026-82656-admidio-path-traversal-in-photo-zip-download","title":"Admidio path traversal in photo ZIP download","severity":"low","exploited":false,"published_at":"2026-08-30T15:16:46.457+00:00","url":"https://junglewise.ai/threats/cve-2026-82656-admidio-path-traversal-in-photo-zip-download"},{"cve":"CVE-2026-82655","cvss":7.5,"epss":0.0056,"slug":"cve-2026-82655-admidio-blind-sql-injection-in-lists-show-php","title":"Admidio blind SQL injection in lists_show.php","severity":"high","exploited":false,"published_at":"2026-08-30T15:16:46.31+00:00","url":"https://junglewise.ai/threats/cve-2026-82655-admidio-blind-sql-injection-in-lists-show-php"},{"cve":"CVE-2026-47233","cvss":6.5,"epss":0.0031,"slug":"cve-2026-47233-admidio-unauthorized-inventory-field-deletion-in-inventory-module","title":"Admidio unauthorized inventory field deletion in inventory module","severity":"medium","exploited":false,"published_at":"2026-05-29T22:09:38+00:00","url":"https://junglewise.ai/threats/cve-2026-47233-admidio-unauthorized-inventory-field-deletion-in-inventory-module"},{"cve":"CVE-2026-47234","cvss":4.4,"epss":0.0017,"slug":"cve-2026-47234-admidio-sensitive-information-disclosure-in-application-logs","title":"Admidio sensitive information disclosure in application logs","severity":"medium","exploited":false,"published_at":"2026-05-29T22:07:52+00:00","url":"https://junglewise.ai/threats/cve-2026-47234-admidio-sensitive-information-disclosure-in-application-logs"},{"cve":"CVE-2026-47232","cvss":4.3,"epss":0.0013,"slug":"cve-2026-47232-admidio-csrf-in-pkcs-12-private-key-export","title":"Admidio CSRF in PKCS#12 private key export","severity":"medium","exploited":false,"published_at":"2026-05-29T22:07:24+00:00","url":"https://junglewise.ai/threats/cve-2026-47232-admidio-csrf-in-pkcs-12-private-key-export"},{"cve":"CVE-2026-47231","cvss":8.1,"epss":0.0035,"slug":"cve-2026-47231-admidio-idor-in-documents-files-php-move-save-handler","title":"Admidio IDOR in documents-files.php move_save handler","severity":"high","exploited":false,"published_at":"2026-05-29T22:06:48+00:00","url":"https://junglewise.ai/threats/cve-2026-47231-admidio-idor-in-documents-files-php-move-save-handler"},{"cve":"CVE-2026-47230","cvss":6.5,"epss":0.003,"slug":"cve-2026-47230-admidio-idor-in-documents-files-php-allows-unauthorized-file","title":"Admidio IDOR in documents-files.php allows unauthorized file renaming","severity":"medium","exploited":false,"published_at":"2026-05-29T22:05:47+00:00","url":"https://junglewise.ai/threats/cve-2026-47230-admidio-idor-in-documents-files-php-allows-unauthorized-file"},{"cve":"CVE-2026-47229","cvss":5.4,"epss":0.0014,"slug":"cve-2026-47229-admidio-csrf-in-sso-client-enable-action","title":"Admidio CSRF in SSO client enable action","severity":"medium","exploited":false,"published_at":"2026-05-29T22:01:58+00:00","url":"https://junglewise.ai/threats/cve-2026-47229-admidio-csrf-in-sso-client-enable-action"},{"cve":"CVE-2026-47228","cvss":5.2,"epss":0.0016,"slug":"cve-2026-47228-admidio-csrf-password-reset-in-registration-module","title":"Admidio CSRF password reset in registration module","severity":"medium","exploited":false,"published_at":"2026-05-29T21:58:44+00:00","url":"https://junglewise.ai/threats/cve-2026-47228-admidio-csrf-password-reset-in-registration-module"},{"cve":"CVE-2026-47227","cvss":6.5,"epss":0.0033,"slug":"cve-2026-47227-admidio-broken-authorization-in-category-management","title":"Admidio broken authorization in category management","severity":"medium","exploited":false,"published_at":"2026-05-29T21:57:05+00:00","url":"https://junglewise.ai/threats/cve-2026-47227-admidio-broken-authorization-in-category-management"},{"cve":"CVE-2026-47226","cvss":6.5,"epss":0.0035,"slug":"cve-2026-47226-admidio-authorization-bypass-in-file-delete-handler","title":"Admidio authorization bypass in file_delete handler","severity":"medium","exploited":false,"published_at":"2026-05-29T21:54:09+00:00","url":"https://junglewise.ai/threats/cve-2026-47226-admidio-authorization-bypass-in-file-delete-handler"},{"cve":"CVE-2018-25370","cvss":5.3,"epss":0.0002,"slug":"cve-2018-25370-admidio-csrf-in-roles-function-php","title":"Admidio CSRF in roles_function.php","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:19.857+00:00","url":"https://junglewise.ai/threats/cve-2018-25370-admidio-csrf-in-roles-function-php"},{"cve":"CVE-2026-34384","cvss":4.5,"epss":0.0019,"slug":"cve-2026-34384-admidio-csrf-in-registration-approval-actions","title":"Admidio CSRF in registration approval actions","severity":"medium","exploited":false,"published_at":"2026-03-31T21:16:30.503+00:00","url":"https://junglewise.ai/threats/cve-2026-34384-admidio-csrf-in-registration-approval-actions"},{"cve":"CVE-2026-34383","cvss":4.3,"epss":0.0015,"slug":"cve-2026-34383-admidio-csrf-and-validation-bypass-in-inventory-module","title":"Admidio CSRF and validation bypass in inventory module","severity":"medium","exploited":false,"published_at":"2026-03-31T21:16:30.343+00:00","url":"https://junglewise.ai/threats/cve-2026-34383-admidio-csrf-and-validation-bypass-in-inventory-module"},{"cve":"CVE-2026-34382","cvss":4.6,"epss":0.0014,"slug":"cve-2026-34382-admidio-csrf-in-mylist-function-php-list-deletion","title":"Admidio CSRF in mylist_function.php list deletion","severity":"medium","exploited":false,"published_at":"2026-03-31T21:16:30.18+00:00","url":"https://junglewise.ai/threats/cve-2026-34382-admidio-csrf-in-mylist-function-php-list-deletion"},{"cve":"CVE-2026-34381","cvss":7.5,"epss":0.0052,"slug":"cve-2026-34381-admidio-improper-access-control-in-docker-image-document-storage","title":"Admidio improper access control in Docker image document storage","severity":"high","exploited":false,"published_at":"2026-03-31T21:16:30.013+00:00","url":"https://junglewise.ai/threats/cve-2026-34381-admidio-improper-access-control-in-docker-image-document-storage"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Admidio","slug":"admidio","vendor":{"name":"Admidio","slug":"admidio","url":"https://junglewise.ai/threats/vendors/admidio"},"aliases":[],"category":"cms","homepage":"https://www.admidio.org/","repo_url":"https://github.com/admidio/admidio","description":"Admidio is a free, open-source user management system for websites of organizations, groups, and associations.","url":"https://junglewise.ai/threats/technologies/admidio"},"most_severe":[{"cve":"CVE-2026-47231","cvss":8.1,"epss":0.0035,"slug":"cve-2026-47231-admidio-idor-in-documents-files-php-move-save-handler","title":"Admidio IDOR in documents-files.php move_save handler","severity":"high","exploited":false,"published_at":"2026-05-29T22:06:48+00:00","url":"https://junglewise.ai/threats/cve-2026-47231-admidio-idor-in-documents-files-php-move-save-handler"},{"cve":"CVE-2026-82655","cvss":7.5,"epss":0.0056,"slug":"cve-2026-82655-admidio-blind-sql-injection-in-lists-show-php","title":"Admidio blind SQL injection in lists_show.php","severity":"high","exploited":false,"published_at":"2026-08-30T15:16:46.31+00:00","url":"https://junglewise.ai/threats/cve-2026-82655-admidio-blind-sql-injection-in-lists-show-php"},{"cve":"CVE-2026-34381","cvss":7.5,"epss":0.0052,"slug":"cve-2026-34381-admidio-improper-access-control-in-docker-image-document-storage","title":"Admidio improper access control in Docker image document storage","severity":"high","exploited":false,"published_at":"2026-03-31T21:16:30.013+00:00","url":"https://junglewise.ai/threats/cve-2026-34381-admidio-improper-access-control-in-docker-image-document-storage"},{"cve":"CVE-2026-82657","cvss":7.5,"epss":0.0045,"slug":"cve-2026-82657-admidio-rss-feed-authentication-bypass-in-forum-and-announcements","title":"Admidio RSS feed authentication bypass in forum and announcements","severity":"high","exploited":false,"published_at":"2026-08-30T15:16:46.607+00:00","url":"https://junglewise.ai/threats/cve-2026-82657-admidio-rss-feed-authentication-bypass-in-forum-and-announcements"},{"cve":"CVE-2026-47226","cvss":6.5,"epss":0.0035,"slug":"cve-2026-47226-admidio-authorization-bypass-in-file-delete-handler","title":"Admidio authorization bypass in file_delete handler","severity":"medium","exploited":false,"published_at":"2026-05-29T21:54:09+00:00","url":"https://junglewise.ai/threats/cve-2026-47226-admidio-authorization-bypass-in-file-delete-handler"},{"cve":"CVE-2026-47227","cvss":6.5,"epss":0.0033,"slug":"cve-2026-47227-admidio-broken-authorization-in-category-management","title":"Admidio broken authorization in category management","severity":"medium","exploited":false,"published_at":"2026-05-29T21:57:05+00:00","url":"https://junglewise.ai/threats/cve-2026-47227-admidio-broken-authorization-in-category-management"},{"cve":"CVE-2026-47233","cvss":6.5,"epss":0.0031,"slug":"cve-2026-47233-admidio-unauthorized-inventory-field-deletion-in-inventory-module","title":"Admidio unauthorized inventory field deletion in inventory module","severity":"medium","exploited":false,"published_at":"2026-05-29T22:09:38+00:00","url":"https://junglewise.ai/threats/cve-2026-47233-admidio-unauthorized-inventory-field-deletion-in-inventory-module"},{"cve":"CVE-2026-47230","cvss":6.5,"epss":0.003,"slug":"cve-2026-47230-admidio-idor-in-documents-files-php-allows-unauthorized-file","title":"Admidio IDOR in documents-files.php allows unauthorized file renaming","severity":"medium","exploited":false,"published_at":"2026-05-29T22:05:47+00:00","url":"https://junglewise.ai/threats/cve-2026-47230-admidio-idor-in-documents-files-php-allows-unauthorized-file"},{"cve":"CVE-2026-47229","cvss":5.4,"epss":0.0014,"slug":"cve-2026-47229-admidio-csrf-in-sso-client-enable-action","title":"Admidio CSRF in SSO client enable action","severity":"medium","exploited":false,"published_at":"2026-05-29T22:01:58+00:00","url":"https://junglewise.ai/threats/cve-2026-47229-admidio-csrf-in-sso-client-enable-action"},{"cve":"CVE-2018-25370","cvss":5.3,"epss":0.0002,"slug":"cve-2018-25370-admidio-csrf-in-roles-function-php","title":"Admidio CSRF in roles_function.php","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:19.857+00:00","url":"https://junglewise.ai/threats/cve-2018-25370-admidio-csrf-in-roles-function-php"}],"generated_at":"2026-09-26T20:07:00.238639+00:00"}