Start for Free
pypi

plone

View on pypi registry
100 Total advisories
100 Vulnerabilities
0 Malware

Dependency scanning

Check whether plone is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 7.1
PyPI

CVE-2024-0669

Cross-Frame Scripting vulnerability has been found on Plone CMS
CRITICAL 9.8
PyPI

CVE-2020-7941

Plone Unauthenticated Write Vulnerability
UNKNOWN
PyPI

CVE-2020-7938

CVE-2020-7938
HIGH 8.8
PyPI

CVE-2020-7938

Plone Privilege Escallation
UNKNOWN
PyPI

CVE-2020-28736

CVE-2020-28736
HIGH 8.8
PyPI

CVE-2020-28736

Improper Restriction of XML External Entity Reference in Plone
UNKNOWN
PyPI

CVE-2020-28735

CVE-2020-28735
HIGH 8.8
PyPI

CVE-2020-28735

SSRF attacks via tracebacks in Plone
UNKNOWN
PyPI

CVE-2020-28734

CVE-2020-28734
HIGH 8.8
PyPI

CVE-2020-28734

Improper Restriction of XML External Entity Reference in Plone
UNKNOWN
PyPI

CVE-2011-1950

CVE-2011-1950
MEDIUM 6.5
PyPI

CVE-2011-1950

Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts
UNKNOWN
PyPI

CVE-2021-33507

CVE-2021-33507
MEDIUM 6.1
PyPI

CVE-2021-33507

Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone
UNKNOWN
PyPI

CVE-2011-1948

CVE-2011-1948
MEDIUM 6.1
PyPI

CVE-2011-1948

Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
UNKNOWN
PyPI

CVE-2015-7315

CVE-2015-7315
MEDIUM 5.9
PyPI

CVE-2015-7315

Plone unauthorized member addition vulnerability
UNKNOWN
PyPI

CVE-2017-1000481

CVE-2017-1000481
MEDIUM 6.1
PyPI

CVE-2017-1000481

Products.CMFPlone Open Redirect Vulnerability
UNKNOWN
PyPI

CVE-2017-1000482

CVE-2017-1000482
MEDIUM 5.4
PyPI

CVE-2017-1000482

Products.CMFPlone XSS in profile home_page property
UNKNOWN
PyPI

CVE-2006-4247

CVE-2006-4247
CRITICAL 9.1
PyPI

CVE-2006-4247

Plone allows anonymous users to reset any users password through the web via Password Reset Tool
UNKNOWN
PyPI

CVE-2006-4249

CVE-2006-4249
MEDIUM 5.9
PyPI

CVE-2006-4249

Plone allows a user to masquerade as a group
UNKNOWN
PyPI

CVE-2008-0164

CVE-2008-0164
HIGH 7.5
PyPI

CVE-2008-0164

Plone Cross-site request forgery (CSRF)
UNKNOWN
PyPI

CVE-2011-2528

CVE-2011-2528
UNKNOWN
PyPI

CVE-2011-2528

High severity vulnerability that affects Plone and Zope2
UNKNOWN
PyPI

CVE-2011-2528

CVE-2011-2528
UNKNOWN
PyPI

CVE-2008-0164

CVE-2008-0164
UNKNOWN
PyPI

CVE-2006-4247

CVE-2006-4247
UNKNOWN
PyPI

CVE-2006-4249

CVE-2006-4249
MEDIUM 5.5
PyPI

CVE-2024-22889

Phone information disclosure vulnerability
HIGH 7.1
PyPI

CVE-2024-0669

Cross-Frame Scripting vulnerability has been found on Plone CMS
MEDIUM 5.5
PyPI

CVE-2024-22889

Phone information disclosure vulnerability
UNKNOWN
PyPI

CVE-2011-4030

Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
UNKNOWN
PyPI

CVE-2011-1340

Plone XSS Vulnerability
UNKNOWN
PyPI

CVE-2011-1340

Plone XSS Vulnerability
UNKNOWN
PyPI

CVE-2011-4030

Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
UNKNOWN
PyPI

CVE-2008-1393

Plone Improper Session Management
UNKNOWN
PyPI

CVE-2008-1394

Plone CMS Improper Session Management
UNKNOWN
PyPI

CVE-2006-1711

Plone allows remote users to modify arbitrary portraits
UNKNOWN
PyPI

CVE-2009-0662

CVE-2009-0662
UNKNOWN
PyPI

CVE-2008-1396

Plone credentials stored in session cookie
UNKNOWN
PyPI

CVE-2008-4571

Plone Cross-site Scripting vulnerability in the LiveSearch module
UNKNOWN
PyPI

CVE-2008-1396

Plone credentials stored in session cookie
UNKNOWN
PyPI

CVE-2008-1393

Plone Improper Session Management
UNKNOWN
PyPI

CVE-2008-4571

Plone Cross-site Scripting vulnerability in the LiveSearch module
UNKNOWN
PyPI

CVE-2008-1394

Plone CMS Improper Session Management
UNKNOWN
PyPI

CVE-2006-1711

Plone allows remote users to modify arbitrary portraits
UNKNOWN
PyPI

CVE-2007-5741

CVE-2007-5741
UNKNOWN
PyPI

CVE-2020-7941

CVE-2020-7941
UNKNOWN
PyPI

CVE-2015-7316

CVE-2015-7316
UNKNOWN
PyPI

CVE-2021-35959

CVE-2021-35959
UNKNOWN
PyPI

CVE-2012-5496

CVE-2012-5496
UNKNOWN
PyPI

CVE-2012-5497

CVE-2012-5497
UNKNOWN
PyPI

CVE-2012-5495

CVE-2012-5495
UNKNOWN
PyPI

CVE-2012-5494

CVE-2012-5494
UNKNOWN
PyPI

CVE-2012-5492

CVE-2012-5492
UNKNOWN
PyPI

CVE-2012-5493

CVE-2012-5493
UNKNOWN
PyPI

CVE-2012-5491

CVE-2012-5491
UNKNOWN
PyPI

CVE-2012-5488

CVE-2012-5488
UNKNOWN
PyPI

CVE-2012-5487

CVE-2012-5487
UNKNOWN
PyPI

CVE-2012-5485

CVE-2012-5485
UNKNOWN
PyPI

CVE-2010-2422

CVE-2010-2422
UNKNOWN
PyPI

CVE-2011-0720

CVE-2011-0720
UNKNOWN
PyPI

CVE-2021-3313

CVE-2021-3313
UNKNOWN
PyPI

CVE-2020-7940

CVE-2020-7940
UNKNOWN
PyPI

CVE-2020-7939

CVE-2020-7939
UNKNOWN
PyPI

CVE-2013-7062

CVE-2013-7062
UNKNOWN
PyPI

CVE-2017-1000483

CVE-2017-1000483
UNKNOWN
PyPI

CVE-2020-7937

CVE-2020-7937
UNKNOWN
PyPI

CVE-2020-7936

CVE-2020-7936
UNKNOWN
PyPI

CVE-2016-7139

CVE-2016-7139
UNKNOWN
PyPI

CVE-2016-7140

CVE-2016-7140
UNKNOWN
PyPI

CVE-2016-7147

CVE-2016-7147
UNKNOWN
PyPI

CVE-2016-7138

CVE-2016-7138
UNKNOWN
PyPI

CVE-2016-7137

CVE-2016-7137
UNKNOWN
PyPI

CVE-2016-7135

CVE-2016-7135
UNKNOWN
PyPI

CVE-2016-4043

CVE-2016-4043
UNKNOWN
PyPI

CVE-2013-4194

CVE-2013-4194
UNKNOWN
PyPI

CVE-2013-4193

CVE-2013-4193
UNKNOWN
PyPI

CVE-2013-4195

CVE-2013-4195
UNKNOWN
PyPI

CVE-2015-7293

CVE-2015-7293
UNKNOWN
PyPI

CVE-2013-4192

CVE-2013-4192
UNKNOWN
PyPI

CVE-2013-4191

CVE-2013-4191
UNKNOWN
PyPI

CVE-2016-4041

CVE-2016-4041
UNKNOWN
PyPI

CVE-2016-4042

CVE-2016-4042
UNKNOWN
PyPI

CVE-2013-4190

CVE-2013-4190
UNKNOWN
PyPI

CVE-2015-7318

CVE-2015-7318
UNKNOWN
PyPI

CVE-2016-7136

CVE-2016-7136
UNKNOWN
PyPI

CVE-2013-4200

CVE-2013-4200
UNKNOWN
PyPI

CVE-2012-5490

CVE-2012-5490
UNKNOWN
PyPI

CVE-2013-4199

CVE-2013-4199
UNKNOWN
PyPI

CVE-2013-4198

CVE-2013-4198
UNKNOWN
PyPI

CVE-2013-4197

CVE-2013-4197
UNKNOWN
PyPI

CVE-2013-4196

CVE-2013-4196
UNKNOWN
PyPI

CVE-2013-4188

CVE-2013-4188

Browse more PyPI advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes