Vulnerability Database · Packagist · processwire/processwire · Version
processwire/processwire 3.0.35
3.0.35 is affected by 6 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 1 Medium 4 Low 1 Unrated 0
-
Database updated 22/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
processwire/processwire 3.0.35 vulnerabilities
6 vulnerabilities cover processwire/processwire 3.0.35. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2023-24676: Arbitrary Code Execution in Processwire | 7.2 high | No fix published | 24 Jan 2024 |
| CVE-2026-40500: ProcessWire Server-Side Request Forgery Vulnerability in Admin Panel | 6.8 medium | No fix published | 16 Apr 2026 |
| CVE-2022-40488: ProcessWire vulnerable to Cross-Site Request Forgery | 6.5 medium | No fix published | 31 Oct 2022 |
| CVE-2022-40487: ProcessWire vulnerable to Cross-site Scripting | 6.1 medium | No fix published | 31 Oct 2022 |
| CVE-2025-60790: ProcessWire CMS Resource-Exhaustion Denial of Service Vulnerability | 5.6 medium | No fix published | 21 Oct 2025 |
| CVE-2024-41597: ProcessWire Cross Site Request Forgery vulnerability | 4.2 low | No fix published | 19 Jul 2024 |
Looking for another version, or everything Vulert holds for processwire/processwire?
Questions
About processwire/processwire 3.0.35
Is processwire/processwire 3.0.35 vulnerable?
Yes. 6 vulnerabilities in the Vulert database cover processwire/processwire 3.0.35: 0 critical, 1 high, 4 medium and 1 low. Each entry above names the fixed version to move to.
How do I monitor processwire/processwire for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the processwire/processwire version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.