xwikisas xwiki-pro-macros
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-44179 | >= 1.13, < 1.14.5 | XWiki Pro Macros: excerpt-include title and content injection executes code | CRITICAL 9.9 | 0.7 % | ||
| CVE-2025-65036 | < 1.27.1 | XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macro | HIGH 8.3 | 0.4 % | ||
| CVE-2025-65089 | < 1.27.0 | XWiki view file macro: User can view content of office file without view rights on the attachment | MEDIUM 6.8 | 0.3 % | ||
| CVE-2025-55730 | >= 1.0, < 1.26.5 | XWiki Remote Macros vulnerable to remote code execution using the confluence paste code macro | CRITICAL 10.0 | 0.7 % | ||
| CVE-2025-55729 | >= 1.0, < 1.26.5 | XWiki Remote Macros vulnerable to remote code execution using the ConfluenceLayoutSection macro | CRITICAL 10.0 | 0.7 % | ||
| CVE-2025-55728 | >= 1.0, < 1.26.5 | XWiki Remote Macros vulnerable to remote code execution using the panel macro | CRITICAL 10.0 | 0.8 % | ||
| CVE-2025-55727 | >= 1.0, < 1.26.5 | XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro | CRITICAL 10.0 | 1.0 % | ||
| CVE-2024-42489 | >= 1.0, < 1.10.1 | Pro Macros Remote Code Execution via Viewpdf and similar macros | CRITICAL 10.0 | 1.1 % |