CVE-2025-67830

Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.

We have discovered 984 live websites that are affected by CVE-2025-67830.

Run a Free Instant Scan



Affected Software

Product  Mura CMS
Category Content Management System
Vulnerable Domains984 live websites (100% of Mura CMS install base)
Vulnerable Versions
  • from 0 through 10.1.14
Vulnerable Versions Count66 versions ( 97% of all versions)



Details

  • Published - Mar 18, 2026
  • Updated - Mar 19, 2026

Website Distribution by Country

Number of websites using CVE-2025-67830
United States569 websites


GB94 websites
Switzerland61 websites
Germany60 websites
Netherlands43 websites
Italy37 websites
France34 websites
Canada26 websites
Czech Republic20 websites
Sweden9 websites

Website Distribution by TLD

Number of websites using CVE-2025-67830
.com373 websites
.org162 websites
.ch60 websites
.co.uk47 websites
.it37 websites
.edu26 websites
.net25 websites
.nl23 websites
.ca20 websites
.com.au20 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-67830

Top websites that are affected by CVE-2025-67830. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.com United States*,***
***********.info United States**,***
***.gov United States**,***
*******.org United States**,***
***.***.wales GB**,***
***.***.uk United States**,***
**********.com United States**,***
****.org Germany**,***
**.**.gov United States**,***
*****.org Germany**,***
See full domain list

FAQ

A total of 984 websites have been identified as vulnerable to CVE-2025-67830, based on global website indexing conducted by WebTechSurvey.
The Mura CMS is affected by the CVE-2025-67830 vulnerability.
Mura CMS versions up to and including 10.1.14 are vulnerable to CVE-2025-67830.