Skip to main content

Pro Macros

5 CVEs product

Monthly

CVE-2025-65036 Dec 05, 17:16 HIGH PATCH This Week

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote code execution. This vulnerability is fixed in 1.27.1.

Authentication Bypass RCE Atlassian Pro Macros Xwiki
NVD GitHub
CVSS 3.1
8.3
EPSS
0.7%
CVE-2025-65089 Nov 19, 18:15 Maven MEDIUM PATCH This Month

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Atlassian Pro Macros Xwiki
NVD GitHub
CVSS 3.1
6.8
EPSS
0.0%
CVE-2025-55728 Sep 09, 19:15 CRITICAL PATCH This Week

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Code Injection Atlassian Pro Macros Xwiki
NVD GitHub
CVSS 3.1
10.0
EPSS
3.3%
CVE-2025-55727 Sep 09, 19:15 CRITICAL POC PATCH Act Now

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Code Injection Atlassian Pro Macros Xwiki
NVD GitHub
CVSS 3.1
10.0
EPSS
6.9%
CVE-2024-42489 Aug 12, 16:15 HIGH PATCH This Week

Pro Macros provides XWiki rendering macros. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Pro Macros Xwiki
NVD GitHub
CVSS 3.1
8.8
EPSS
1.1%
EPSS 1% CVSS 8.3
HIGH PATCH This Week

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote code execution. This vulnerability is fixed in 1.27.1.

Authentication Bypass RCE Atlassian +2
NVD GitHub
EPSS 0% CVSS 6.8
MEDIUM PATCH This Month

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Atlassian +2
NVD GitHub
EPSS 3% CVSS 10.0
CRITICAL PATCH This Week

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Code Injection Atlassian +2
NVD GitHub
EPSS 7% CVSS 10.0
CRITICAL POC PATCH Act Now

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Code Injection Atlassian +2
NVD GitHub
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Pro Macros provides XWiki rendering macros. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Pro Macros Xwiki
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy