All packages
RiteCMS vulnerabilities
3 known CVE vulnerabilities in RiteCMS, translated and rated.
- CVE-2025-67171High
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal. The vulnerability enables reading files outside the intended directory.
- CVE-2025-67168Medium
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
- CVE-2025-67172High
RiteCMS v3.1.0 has an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS