grav-plugin-data-manager vulnerabilities

CVEs whose affected-version data names the grav-plugin-data-manager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109316Medium· 6.5

2w ago

Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration

Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete…

▾ Sunlitgetgrav · grav-plugin-data-managerEPSS 0.27%via NVD