Product by Dromara

    Dromara RuoYi-Vue-Plus

    6 known vulnerabilities in Dromara RuoYi-Vue-Plus (Dromara), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Dromara RuoYi-Vue-Plus (Dromara)
    CriticalCVE-2025-66916

    Dromara RuoYi-Vue-Plus: security vulnerability

    		9.4
    CriticalCVE-2025-6925

    Dromara RuoYi-Vue-Plus Mail MailController.java path traversal

    		5.3
    MediumCVE-2026-77795

    Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization

    		6.3
    HighCVE-2026-58176

    RuoYi-Vue-Plus - Missing Authorization on Workflow Task Management Endpoints

    		6.5
    MediumCVE-2026-110106

    RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}

    		4.2
    MediumCVE-2026-2819

    Dromara RuoYi-Vue-Plus Workflow deleteByInstanceIds SaServletFilter authorization

    		6.3

    All products by Dromara