ritecms vulnerabilities
CVEs whose affected-version data names the ritecms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2025-67171High· 7.5Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
▾ Twilightritecms · ritecmsEPSS 0.82%via NVD
CVE-2025-67168Medium· 5.3RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
▾ Sunlitritecms · ritecmsEPSS 0.14%via NVD
CVE-2025-67172High· 7.2RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
▾ Twilightritecms · ritecmsEPSS 0.92%via NVD