Craft CMS
A content management system targeted in a global CMS exploitation campaign for web shell deployment.
Tag: CMS
MaxSite CMS
A content management system targeted in a global CMS exploitation campaign for web shell deployment.
MetInfo CMS
A content management system targeted in a global CMS exploitation campaign for web shell deployment.
iCagenda and Balbooa Forms Joomla Flaws Exploited as Zero-Days; CISA Adds to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
CVE-2025-6389: Sneeit Framework Vulnerability
A vulnerability in the Sneeit Framework exploited in a global CMS campaign for web shell deployment.
CVE-2025-12352: Gravity Forms WordPress Plugin Vulnerability
A vulnerability in the Gravity Forms WordPress plugin exploited in a global CMS campaign for web shell deployment.
CVE-2025-32432: Craft CMS Vulnerability
A vulnerability in Craft CMS exploited in a global CMS campaign for web shell deployment.
CVE-2026-3395: MaxSite CMS Vulnerability
A vulnerability in MaxSite CMS exploited in a global CMS campaign for web shell deployment.
CVE-2026-29014: MetInfo CMS Vulnerability
A vulnerability in MetInfo CMS exploited in a global CMS campaign for web shell deployment.
Australian Cyber Security Centre (ACSC)
Australian agency that issued an alert about a global exploitation campaign targeting vulnerable CMS systems and plugins, including web shell deployment.