Getformwork vulnerabilities
We track 2 vulnerabilities in Getformwork products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Getformwork vulnerabilities
- 7.1 High severity
formwork: Improper Limitation of a Pathname to a Restricted Directory
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated trav
- 8.8 High severity
formwork: Improper Privilege Management
Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does no