https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-67165.htmlhttps://patchthecve.com/cve/CVE-2025-67165.htmlTue, 13 Oct 2026 11:10:00 +0000CRITICAL 9.8: An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.https://patchthecve.com/cve/CVE-2025-67164.htmlhttps://patchthecve.com/cve/CVE-2025-67164.htmlTue, 13 Oct 2026 11:10:00 +0000CRITICAL 9.9: An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file.https://patchthecve.com/cve/CVE-2024-45967.htmlhttps://patchthecve.com/cve/CVE-2024-45967.htmlWed, 17 Jun 2026 07:55:04 +0000MEDIUM 4.7: Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.