codeigniter codeigniter

Name: codeigniter codeigniter
Brand: codeigniter

productUS

cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

21critical7high8medium1low

updated 2026-10-27

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-8684US	critical9.8	71.7% (99th)	Exploit	no fix	2017-09-19	≤ 2.2.6
CVE-2014-8686US	critical9.8	37.2% (99th)	Exploit	no fix	2017-09-19	≤ 2.1.4
CVE-2012-1915US	medium6.1	1.86% (79th)	Exploit	2.1.2	2020-01-09	< 2.1.2
CVE-2023-32692US	critical9.8	1.13% (66th)	Exploit	4.3.5	2023-05-30	< 4.3.5
CVE-2022-21647US	critical9.8	37.7% (99th)	—	4.1.6	2022-01-04	4.0.0 → 4.1.6
CVE-2016-10131US	critical9.8	3.11% (88th)	—	no fix	2017-01-12	≤ 3.1.2
CVE-2015-5725US	critical9.8	2.32% (83rd)	—	2.2.4	2018-02-21	< 2.2.4
CVE-2020-10793US	high8.8	1.90% (80th)	—	no fix	2020-03-23	≤ 4.0.0
CVE-2007-3707US	medium5.0	1.71% (77th)	—	no fix	2007-07-11	= 1.5.3
CVE-2025-54418US	—	1.53% (75th)	—	4.6.2	2025-07-28	4.0.0 → 4.6.2
CVE-2018-12071US	critical9.8	1.50% (74th)	—	3.1.9	2018-06-17	< 3.1.9
CVE-2013-4891US	medium6.1	1.43% (73rd)	—	2.1.4	2018-02-21	< 2.1.4
CVE-2011-3719US	medium5.0	1.33% (71st)	—	no fix	2011-09-23	= 1.7.2
CVE-2007-3708US	medium4.3	1.22% (69th)	—	no fix	2007-07-11	= 1.5.3
CVE-2007-3709US	medium5.0	1.19% (68th)	—	no fix	2007-07-11	= 1.5.3
CVE-2022-24711US	critical9.8	1.17% (67th)	—	4.1.9	2022-02-28	4.0.0 → 4.1.9
CVE-2022-39284US	medium4.3	1.12% (66th)	—	4.2.7	2022-10-06	4.0.0 → 4.2.7
CVE-2022-40835US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40834US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40833US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40832US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40831US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40830US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40829US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40828US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40826US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40825US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40824US	critical9.8	1.09% (65th)	—	no fix	2022-10-07	2 versions
CVE-2022-40827US	critical9.8	1.04% (64th)	—	no fix	2022-10-07	2 versions
CVE-2022-21715US	medium6.1	1.00% (63rd)	—	4.1.8	2022-01-24	4.0.0 → 4.1.8
CVE-2017-1000247US	high7.5	0.93% (60th)	—	no fix	2017-11-17	= 3.1.3
CVE-2022-46170US	critical9.8	0.91% (60th)	—	4.2.11	2022-12-22	4.0.0 → 4.2.11
CVE-2024-29904US	high7.5	0.77% (56th)	—	4.4.7	2024-03-29	< 4.4.7
CVE-2007-3706US	low2.1	0.64% (50th)	—	no fix	2007-07-11	= 1.5.3
CVE-2023-46240US	high7.5	0.62% (50th)	—	4.4.3	2023-10-31	< 4.4.3
CVE-2022-35943US	high8.8	0.59% (48th)	—	4.2.3	2022-08-12	< 4.2.3
CVE-2022-24712US	high8.8	0.56% (47th)	—	4.1.9	2022-02-28	4.0.0 → 4.1.9
CVE-2025-24013US	—	0.51% (43rd)	—	4.5.8	2025-01-20	< 4.5.8
CVE-2022-23556US	high7.5OT elevated	0.40% (34th)	—	4.2.11	2022-12-22	4.0.0 → 4.2.11
CVE-2024-41344US	—	0.23% (14th)	—	no fix	2024-10-15	= 3.1.13

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')13 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-310CWE-3102 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE40 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan