Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Kiwi — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Kiwi, with AI-generated Chinese analysis, references, and POCs.

Vendor: kiwitcms

CVE IDTitleCVSSSeverityPublished
CVE-2025-58790 WordPress Kiwi Plugin <= 2.1.8 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-09-05
CVE-2023-36809 Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox CWE-79 8.1 High2023-07-05
CVE-2023-33977 Stored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS CWE-79 8.1 High2023-06-06
CVE-2023-32686 kiwitcms vulnerable to stored XSS via unrestricted files upload CWE-79 8.1 High2023-05-27
CVE-2023-30628 Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow CWE-78 8.8 High2023-04-24
CVE-2023-30613 Kiwi TCMS unrestricted file upload vulnerability CWE-434 8.1 High2023-04-24
CVE-2023-30544 Kiwi TCMS may allow user to update email address to unverified one CWE-283 3.9 Low2023-04-24
CVE-2023-27489 Stored cross site scripting via SVG file upload in Kiwi TCMS CWE-79 7.6 High2023-03-29
CVE-2023-25156 Kiwi TCMS has no protection against brute-force attacks on login page CWE-770 7.5 High2023-02-15
CVE-2023-25171 Kiwi TCMS has denial of service vulnerability on Password reset page CWE-770 7.5 High2023-02-15
CVE-2023-22451 Weak password requirements in Kiwi TCMS CWE-521 6.5 Medium2023-01-02

All 11 known CVE vulnerabilities affecting Kiwi with full Chinese analysis, references, and POCs where available.