VulertSecurity VulertSecurity

Vulnerability Database · Packagist · pimcore/admin-ui-classic-bundle · Version

pimcore/admin-ui-classic-bundle v1.5.3

v1.5.3 is affected by 14 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 4 Medium 9 Low 1 Unrated 0

All pimcore/admin-ui-classic-bundle versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

pimcore/admin-ui-classic-bundle v1.5.3 vulnerabilities

14 vulnerabilities cover pimcore/admin-ui-classic-bundle v1.5.3. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-44741: SQL Injection Vulnerability in Pimcore Admin Classic Bundle's Translation Grid Date Filter 8.8 high 2.3.6 27 May 2026
CVE-2024-23648: Host Header Injection in Pimcore Admin-UI-Classic-Bundle Password Reset 8.8 high 1.2.3 24 Jan 2024
CVE-2023-49075: Pimcore Admin UI Two Factor Authentication Bypass 8.4 high 1.2.2 27 Nov 2023
CVE-2024-25625: Pimcore Host Header Injection in user invitation link 8.1 high 1.3.4 20 Feb 2024
CVE-2025-24980: User Enumeration Vulnerability in Pimcore Admin Classic Bundle 6.9 medium 1.7.4 07 Feb 2025
CVE-2024-24822: Pimcore Admin Classic Bundle permissions bypass vulnerability 6.5 medium 1.3.3 07 Feb 2024
CVE-2024-41109: Pimcore admin-ui-classic-bundle - Disclosure of System and Database Information 6.3 medium 1.5.2 30 Jul 2024
CVE-2023-46722: Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews 6.1 medium 1.2.0 01 Nov 2023
CVE-2023-37280: Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page 6.1 medium 1.0.3 12 Jul 2023
CVE-2023-42817: Cross-site Scripting vulnerability in pimcore/admin-ui-classic-bundle Translations 5.4 medium 1.1.2 25 Sep 2023
Full Path Disclosure in pimcore/admin-ui-classic-bundle 5.3 medium 1.2.1 15 Nov 2023
CVE-2023-5844: Unverified Password Change in pimcore/admin-ui-classic-bundle 4.3 medium 1.2.0 31 Oct 2023
CVE-2025-30166: HTML Injection Vulnerability in Pimcore Admin Classic Bundle 1.8 low 1.7.6 08 Apr 2025
Vulnerable embedded jQuery Version in PIMCore Admin UI Classic Bundle N/A medium 1.4.3 05 Jun 2024

Looking for another version, or everything Vulert holds for pimcore/admin-ui-classic-bundle?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About pimcore/admin-ui-classic-bundle v1.5.3

Is pimcore/admin-ui-classic-bundle v1.5.3 vulnerable?

Yes. 14 vulnerabilities in the Vulert database cover pimcore/admin-ui-classic-bundle v1.5.3: 0 critical, 4 high, 9 medium and 1 low. Each entry above names the fixed version to move to.

How do I monitor pimcore/admin-ui-classic-bundle for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the pimcore/admin-ui-classic-bundle version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.