Plone
C
CAUTION
8
Total CVEs
1
Crit / High
2
Medium
17%
Unpatched
17%
Patched
6.4
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 2 patched ✗ 2 unpatched ~ 6 under review ⏳ 2 pending score
Intelligence by Audience
PoC Available
4 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"plone" port:443
org:"Plone" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
8
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
17%
Avg CVSS score
6.4
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-16
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-16
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
Recent CVEs
showing 20 of 12
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-57576 | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.76% | 2026-09-22 |
| CVE-2026-57149 | 9.9 CRITICAL | PATCH UNDER REVIEW | 0.64% | 2026-09-22 |
| CVE-2026-54503 PoC | 4.3 MEDIUM | PATCH UNDER REVIEW | 0.23% | 2026-09-15 |
| CVE-2026-55247 | 9.1 CRITICAL | PATCH UNDER REVIEW | 0.34% | 2026-08-28 |
| CVE-2026-55248 PoC | 9.1 CRITICAL | PATCH UNDER REVIEW | 0.44% | 2026-08-28 |
| CVE-2025-61668 | 8.7 HIGH | PATCH UNDER REVIEW | 0.44% | 2025-10-02 |
| CVE-2025-58047 | 7.5 HIGH | PATCHED / FIX AVAILABLE | 0.61% | 2025-08-28 |
| CVE-2024-22889 | ? N/A | UNKNOWN / UNPATCHED | 0.70% | 2024-03-05 |
| CVE-2024-23756 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.25% | 2024-02-08 |
| CVE-2024-23054 | 9.8 CRITICAL | UNKNOWN / UNPATCHED | 1.27% | 2024-02-05 |
| CVE-2024-23055 PoC | 6.1 MEDIUM | UNKNOWN / UNPATCHED | 0.92% | 2024-01-25 |
| CVE-2023-42457 | 7.5 HIGH | PATCHED / FIX AVAILABLE | 1.01% | 2023-09-21 |
Intel
HQHouston, Texas, United States
Founded2001
CountryUnited States
LicenseOpen Source
Trust ScoreC — CAUTION
Max CVSS7.5
Last Updated2026-06-16
Top Weaknesses
CWE-248 (Uncaught Exception)
Unknown Weakness Type
2 occurrences in Plone CVEs
(25% of total)
CWE-862
Unknown Weakness Type
1 occurrence in Plone CVEs
(13% of total)
CWE-1104
Unknown Weakness Type
1 occurrence in Plone CVEs
(13% of total)
CWE-284
Improper Access Control
1 occurrence in Plone CVEs
(13% of total)
CWE-79
Cross-Site Scripting (XSS)
1 occurrence in Plone CVEs
(13% of total)
CWE-1021
Unknown Weakness Type
1 occurrence in Plone CVEs
(13% of total)
CWE-601
Open Redirect
1 occurrence in Plone CVEs
(13% of total)
Company Profile
Plone is an open-source content management system (CMS) built on the Zope application server and written in Python. It is known for its strong security track record, enterprise-grade features, and compliance with accessibility standards, making it a popular choice for government, healthcare, and large organizational websites. Despite its relatively low number of tracked CVEs, Plone's security-focused design and active community contribute to its relevance in cybersecurity discussions.
Response Metrics
Est. MTTR ⓘ
~333 days
(Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -50% better
CVE count 2026 vs 2025:
2 → 1 CVEs
Patch Speed ⓘ Poor (>65% open)
17% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M
Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Plone C valtersit.com