Websitebaker vulnerabilities

Products

• Websitebaker 16

Newest

• websitebaker WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated) CVE-2021-47788 8.7 HighJanuary 15, 2026
• websitebaker WebsiteBaker 2.13.3 Stored Cross-Site Scripting via Page Creation CVE-2023-53953 5.1 MediumDecember 19, 2025
• websitebaker WebsiteBaker 2.13.3 Stored Cross-Site Scripting via SVG File Upload CVE-2023-53903 5.1 MediumDecember 16, 2025
• websitebaker WebsiteBaker 2.13.3 Directory Traversal via Media Delete Endpoint CVE-2023-53902 7.0 HighDecember 16, 2025
• websitebaker WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin... CVE-2020-25990 9.8 CriticalOctober 1, 2020
• websitebaker websitebaker prior to and including 2.8.1 has an authentication error in backup module. CVE-2011-4322 7.5 HighJanuary 21, 2020
• websitebaker An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and... CVE-2011-2933 7.2 HighJanuary 14, 2020
• websitebaker A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in... CVE-2011-2934 8.8 HighJanuary 14, 2020
• websitebaker Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin... CVE-2017-16514 6.1 MediumJanuary 10, 2018
• websitebaker install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code... CVE-2017-9771 9.8 CriticalJune 21, 2017
• websitebaker WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php. CVE-2017-9361 6.1 MediumJune 2, 2017
• websitebaker WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php. CVE-2017-9360 9.8 CriticalJune 2, 2017
• websitebaker Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in... CVE-2017-7410 Public exploit 9.8 CriticalApril 3, 2017
• websitebaker Cross-site scripting (XSS) vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 SP3... CVE-2015-0553 4.3 MediumJanuary 21, 2015
• websitebaker Multiple cross-site scripting (XSS) vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers... CVE-2014-9243 Public exploit 4.3 MediumDecember 3, 2014
• websitebaker SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote... CVE-2014-9242 Public exploit 7.5 HighDecember 3, 2014