payload-plugins vulnerabilities
CVEs whose affected-version data names the payload-plugins package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-58200High· 7.1Payload Plugins is a collection of plugins designed to enhance Payload CMS
Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose hand…
▾ Twilightjhb-software · payload-pluginsEPSS 0.18%via NVD
CVE-2026-59965High· 7.1PoCPayload Plugins is a collection of plugins designed to enhance Payload CMS
Payload Plugins is a collection of plugins designed to enhance Payload CMS. In 0.7.0, @jhb.software/payload-alt-text-plugin exposes POST /api/alt-text-plugin/generate and POST /api/alt-text-plugin/bulk with a default guard that accepts a…
▾ Midnightjhb-software · payload-pluginsEPSS 0.29%via NVD