Wbce Cms vulnerabilities

• wbce cms WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated) CVE-2022-50936 8.7 HighJanuary 13, 2026
• wbce cms, wbce-cms wbce cms +1 more WBCE CMS 1.6.1 Stored Cross-Site Scripting via Page Content CVE-2023-53910 5.1 MediumDecember 17, 2025
• wbce cms, wbce-cms wbce cms +1 more WBCE CMS 1.6.1 SVG File Content Cross-Site Scripting CVE-2023-53909 5.1 MediumDecember 17, 2025
• unknown wbce cms, wbce cms +1 more WBCE CMS 1.6.1 Cross-Site Scripting and Open Redirect Vulnerability CVE-2023-53901 7.1 HighDecember 16, 2025
• wbce cms WBCE CMS <= 1.6.3 Authenticated Remote Code Execution via Module Upload CVE-2025-34506 8.6 HighDecember 11, 2025
• wbce cms WBCE CMS 1.6.2 Remote Code Execution via Elfinder File Upload CVE-2024-58283 8.7 HighDecember 10, 2025
• wbce cms WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter CVE-2025-65950 Public exploit 9.4 CriticalDecember 10, 2025
• wbce cms WBCE CMS has Weak Random Number Generator in Password Generation Function CVE-2025-67504 9.1 CriticalDecember 9, 2025
• wbce cms WBCE CMS allows brute-force protection bypass using X-Forwarded-For header CVE-2025-66204 Public exploit 6.3 MediumDecember 8, 2025
• wbce cms WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR) CVE-2025-65094 Public exploit 8.7 HighNovember 19, 2025
• wbce cms SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote... CVE-2023-39796 9.8 CriticalNovember 10, 2023
• wbce cms Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker... CVE-2023-46054 5.4 MediumOctober 21, 2023
• wbce cms A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with... CVE-2023-43871 Public exploit 5.4 MediumSeptember 28, 2023
• wbce cms An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1... CVE-2023-38947 7.2 HighAugust 3, 2023
• wbce cms WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php. CVE-2023-29855 7.2 HighApril 18, 2023
• wbce cms WBCE CMS v1.5.4 can implement getshell by modifying the upload file type. CVE-2022-46020 EPSS 39.0% 9.8 CriticalDecember 20, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4... CVE-2022-45040 5.4 MediumNovember 25, 2022
• wbce cms An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows... CVE-2022-45039 7.2 HighNovember 25, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows... CVE-2022-45038 5.4 MediumNovember 25, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows... CVE-2022-45037 5.4 MediumNovember 25, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4... CVE-2022-45036 5.4 MediumNovember 25, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in the Overview Page settings module of WBCE CMS v1.5... CVE-2022-45017 4.8 MediumNovember 21, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4... CVE-2022-45016 4.8 MediumNovember 21, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4... CVE-2022-45015 4.8 MediumNovember 21, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4... CVE-2022-45014 4.8 MediumNovember 21, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in the Show Advanced Option module of WBCE CMS v1.5.4... CVE-2022-45013 4.8 MediumNovember 21, 2022
• wbce cms A cross-site scripting (XSS) vulnerability in the Modify Page module of WBCE CMS v1.5.4 allows... CVE-2022-45012 4.8 MediumNovember 21, 2022
• statamic cms WBCE CMS Header class.login.php increase_attempts excessive authentication CVE-2022-4006 3.7 LowNovember 15, 2022
• wbce cms WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php... CVE-2022-30072 5.4 MediumMay 17, 2022
• wbce cms WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php. CVE-2022-30073 5.4 MediumMay 17, 2022
• wbce cms WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS). CVE-2022-28477 6.1 MediumApril 28, 2022
• wbce cms A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to... CVE-2022-25099 7.8 HighFebruary 23, 2022
• wbce cms A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to... CVE-2022-25101 7.8 HighFebruary 23, 2022
• wbce cms, wbce/wbce cms +1 more SQL Injection in wbce/wbce_cms CVE-2021-3817 Public exploit EPSS 38.4% 9.8 CriticalDecember 9, 2021
• wbce cms A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This... CVE-2019-17575 7.2 HighOctober 14, 2019
• wbce cms Cross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject... CVE-2018-6313 4.8 MediumJanuary 25, 2018
• wbce cms WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools... CVE-2017-1000213 4.8 MediumNovember 17, 2017
• wbce cms SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator... CVE-2017-2120 7.2 HighApril 28, 2017
• wbce cms Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read... CVE-2017-2119 8.6 HighApril 28, 2017
• wbce cms Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to... CVE-2017-2118 6.1 MediumApril 28, 2017