processwire/processwire-issues

Releases0

Stars46

ProcessWire issue reports.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-60790 ↗	Oct 21, 2025Tuesday, 21 October 2025, 18:15	6.5 MEDIUM	—
ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validation, enabling resource-exhaustion Denial of Service.