Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

livewire

Products: livewire

26.0

Score

2

CVEs

1

Active

1

PoC

1

KEV

#105

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-54068	2025-07-17	9.2v4.0	ACTIVE		High	None	no	26.0	livewire	Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is uniqu
CVE-2024-47823	2024-10-08	7.7v4.0	POC	—	Low	Low	no	0.0	livewire	Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP. In livewire/livewire prior to `2.12.7` and `v3.5.2`, the file extension of an uploaded file is guessed based on the MIME type. As a result, the actual file extension from the file name is not va

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3