admidio has 7 CVEs on record. 3 were published in the last 90 days. The busiest recent month was March 2026 with 4. The median CVSS is 5.2 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-352 (4).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.2
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-47227Medium· 6.5Admidio is an open-source user management solution48CVE-2026-53760Medium· 5.2Admidio is an open-source user management solution41CVE-2026-34381High· 7.5Admidio is an open-source user management solution41CVE-2026-47230Medium· 6.5Admidio is an open-source user management solution36CVE-2026-34384Medium· 4.5Admidio is an open-source user management solution25
admidio vulnerabilities
CVEs affecting admidio, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-53760Medium· 5.2PoCAdmidio is an open-source user management solution
Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installation, uninstallation, and update operations via GET requests without CSRF token validation. Because…
CVE-2026-47230Medium· 6.5Admidio is an open-source user management solution
Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` mode `file_rename_save` shares the same root-cause shape as the cross-folder move bug (`05-documents-cross-folder-move-idor.md`): …
CVE-2026-47227Medium· 6.5PoCAdmidio is an open-source user management solution
Admidio is an open-source user management solution. `modules/categories.php` checks that the supplied `type` parameter (`ANN`, `EVT`, `ROL`, `USF`, …) corresponds to a module the actor administers. The follow-up "is this specific categor…
CVE-2026-34384Medium· 4.5Admidio is an open-source user management solution
Admidio is an open-source user management solution. Prior to version 5.0.8, the create_user, assign_member, and assign_user action modes in modules/registration.php approve pending user registrations via GET request without validating a …
CVE-2026-34383Medium· 4.3Admidio is an open-source user management solution
Admidio is an open-source user management solution. Prior to version 5.0.8, the inventory module's item_save endpoint accepts a user-controllable POST parameter imported that, when set to true, completely bypasses both CSRF token validat…
CVE-2026-34382Medium· 4.6Admidio is an open-source user management solution
Admidio is an open-source user management solution. From version 5.0.0 to before version 5.0.8, the delete mode handler in mylist_function.php permanently deletes list configurations without validating a CSRF token. An attacker who can l…
CVE-2026-34381High· 7.5Admidio is an open-source user management solution
Admidio is an open-source user management solution. From version 5.0.0 to before version 5.0.8, Admidio relies on adm_my_files/.htaccess to deny direct HTTP access to uploaded documents. The Docker image ships with AllowOverride None in …