Wolfcms vulnerabilities

Products

• Wolf Cms 16
• Wolfcms 2

Newest

• wolfcms Wolf CMS 0.8.3.1 Authorization Bypass via BackupRestoreController CVE-2026-67207 8.7 HighJuly 30, 2026
• wolfcms Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload CVE-2026-67206 Public exploit 8.7 HighJuly 30, 2026
• wolfcms wolf cms WolfCMS User Add cross site scripting CVE-2019-25070 3.5 LowJune 9, 2022
• wolfcms wolf cms A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers... CVE-2012-1932 4.8 MediumFebruary 19, 2020
• wolfcms wolf cms WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/. CVE-2018-18824 4.8 MediumApril 25, 2019
• wolfcms wolf cms WolfCMS 0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/. CVE-2018-18823 4.8 MediumApril 25, 2019
• wolfcms wolf cms Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin... CVE-2019-10646 6.1 MediumMarch 30, 2019
• wolfcms wolf cms WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter. CVE-2018-15842 4.8 MediumAugust 25, 2018
• wolfcms wolf cms Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI. CVE-2018-14837 4.8 MediumAugust 10, 2018
• wolfcms wolf cms Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to... CVE-2018-8814 Public exploit 6.5 MediumApril 4, 2018
• wolfcms wolf cms Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3... CVE-2018-8813 Public exploit 4.8 MediumApril 4, 2018
• wolfcms wolf cms WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in ... CVE-2018-1000087 4.8 MediumMarch 13, 2018
• wolfcms wolf cms WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in... CVE-2018-1000084 5.4 MediumMarch 13, 2018
• wolfcms wolf cms Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as... CVE-2018-6890 Public exploit 4.8 MediumFebruary 22, 2018
• wolfcms wolf cms Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to... CVE-2017-11611 Public exploit 5.4 MediumSeptember 8, 2017
• wolfcms wolf cms Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin... CVE-2015-6568 Public exploit EPSS 10.5% 8.8 HighApril 14, 2017
• wolfcms wolf cms Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin... CVE-2015-6567 Public exploit EPSS 10.8% 8.8 HighApril 14, 2017
• wolfcms wolf cms Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow... CVE-2012-1897 Public exploit 6.8 MediumOctober 1, 2012