CyberSecBulletin

GetSimpleCMS vulnerabilities

We track 2 vulnerabilities in GetSimpleCMS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest GetSimpleCMS vulnerabilities

  • 9.8 Critical severity

    GetSimpleCMS-CE: Improper Authorization

    CVE-2026-53952GetSimpleCMS-CE

    GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE (v3.3.22 and below) allows unauthenticated attackers to create a new administra

  • 9.8 Critical severity

    GetSimpleCMS: Improper Control of Generation of Code

    CVE-2023-6188GetSimpleCMS

    A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit ha