By year
20
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2019-25664 SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackHigh 7.1 · Apr 5, 2026
- CVE-2019-25663 SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the pareHigh 7.1 · Apr 5, 2026
- CVE-2026-33289 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.8 · Mar 19, 2026
- CVE-2026-33288 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.8 · Mar 19, 2026
- CVE-2026-29189 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.1 · Mar 19, 2026
- CVE-2026-29109 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.6 · Mar 19, 2026
- CVE-2026-29103 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Critical 9.1 · Mar 19, 2026
- CVE-2026-29102 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 7.2 · Mar 19, 2026
- CVE-2026-29100 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 7.1 · Mar 19, 2026
- CVE-2026-29099 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.8 · Mar 19, 2026
- CVE-2026-29097 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 7.1 · Mar 19, 2026
- CVE-2026-29096 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.1 · Mar 19, 2026
- CVE-2025-64492 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.8 · Nov 7, 2025
- CVE-2025-64490 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.3 · Nov 7, 2025
- CVE-2025-64489 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.3 · Nov 7, 2025
- CVE-2025-64488 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.6 · Nov 7, 2025
- CVE-2022-50590 SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionaHigh 8.8 · Nov 6, 2025
- CVE-2022-50589 SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality.Critical 9.3 · Nov 6, 2025
- CVE-2025-54784 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.6 · Aug 6, 2025
- CVE-2025-54788 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.8 · Aug 6, 2025
- CVE-2025-54785 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.High 8.8 · Aug 6, 2025
- CVE-2019-18785 SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials.High 7.5 · Mar 19, 2020
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.