https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-26149.htmlhttps://patchthecve.com/cve/CVE-2022-26149.htmlWed, 17 Jun 2026 04:34:47 +0000HIGH 7.2: MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.https://patchthecve.com/cve/CVE-2017-1000067.htmlhttps://patchthecve.com/cve/CVE-2017-1000067.htmlWed, 17 Jun 2026 00:58:40 +0000HIGH 8.8: MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database and possibly escalating privileges.https://patchthecve.com/cve/CVE-2015-1400.htmlhttps://patchthecve.com/cve/CVE-2015-1400.htmlWed, 17 Jun 2026 00:22:21 +0000HIGH 7.5: SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter.https://patchthecve.com/cve/CVE-2010-4883.htmlhttps://patchthecve.com/cve/CVE-2010-4883.htmlTue, 16 Jun 2026 23:25:43 +0000LOW 2.6: Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.