PatchTheCVEritecms vulnerabilities
Recent CVEs affecting ritecms products. 6 tracked.
ritecms has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-17. Highest priority: CVE-2025-67174 (score 54/100).
- CVE-2025-67171 HIGH 7.5 DOWNGRADE Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive f
- CVE-2025-67172 HIGH 7.2 DOWNGRADE RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pa
- CVE-2025-67168 MEDIUM 5.3 DOWNGRADE RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
- CVE-2025-67174 HIGH 7.5 DOWNGRADE A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the h
- CVE-2025-67173 MEDIUM 6.8 DOWNGRADE A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers t
- CVE-2025-67170 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary c
FAQ
How do I fix ritecms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ritecms being exploited right now?
None of the tracked ritecms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ritecms CVE should I patch first?
CVE-2025-67174 currently ranks highest (54/100): A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the h.