Solspace

3 CVEs in 2 Solspace products, including Craft-Freeform, Freeform. Newest: CVE-2026-73858 (2026-09-23). Severity, EPSS and public exploits for each.

Solspace products with known CVEs

ProductCVEs
Craft-Freeform2
Freeform2
Solspace CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73858Medium5.32026-09-23Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can…
CVE-2026-26188Medium5.42026-02-12Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user (able to create/edit forms) can inject…
CVE-2025-52122Critical9.82025-08-27Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection…