Product by Laravel

    Laravel Livewire

    4 known vulnerabilities in Laravel Livewire (Laravel), 1 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Laravel Livewire (Laravel)
    CriticalCVE-2025-54068

    Livewire vulnerable to remote command execution during property update hydration

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2024-47823

    Livewire Remote Code Execution (RCE) on File Uploads

    also in 1 other product

    		9.8
    HighCVE-2024-22859

    Laravel Livewire: Cross-Site Request Forgery (CSRF)

    		8.8
    MediumCVE-2024-21504

    Livewire/livewire: Cross-site Scripting

    		6.1

    All products by Laravel