croogo cms vulnerabilities

Latest croogo cms CVEs

Newest publication first

1. CVE-2026-16219 Croogo CMS Admin File Manager FileManager.php isEditable path traversal

   Published 2026-07-19

   Medium·CVSS 5.3 EPSS 0.43%

   A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit h...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.