https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-67174.htmlhttps://patchthecve.com/cve/CVE-2025-67174.htmlWed, 17 Jun 2026 09:57:30 +0000HIGH 7.5: A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_page_language_file in the admin.php componenthttps://patchthecve.com/cve/CVE-2025-67173.htmlhttps://patchthecve.com/cve/CVE-2025-67173.htmlWed, 17 Jun 2026 09:57:30 +0000MEDIUM 6.8: A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request.https://patchthecve.com/cve/CVE-2025-67171.htmlhttps://patchthecve.com/cve/CVE-2025-67171.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.https://patchthecve.com/cve/CVE-2025-67170.htmlhttps://patchthecve.com/cve/CVE-2025-67170.htmlWed, 17 Jun 2026 09:57:29 +0000MEDIUM 6.1: A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.https://patchthecve.com/cve/CVE-2025-67168.htmlhttps://patchthecve.com/cve/CVE-2025-67168.htmlTue, 13 Oct 2026 11:10:00 +0000MEDIUM 5.3: RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.https://patchthecve.com/cve/CVE-2025-67172.htmlhttps://patchthecve.com/cve/CVE-2025-67172.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.2: RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.