Wondercms vulnerabilities

Products

• Wondercms 37

Newest

• wondercms WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation CVE-2024-58305 8.6 HighDecember 12, 2025
• wondercms WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module... CVE-2025-57055 Public exploit 6.5 MediumSeptember 17, 2025
• wondercms WonderCMS Theme Installation/Plugin Installation installUpdateModuleAction unrestricted upload CVE-2025-3123 Disputed 5.1 MediumApril 2, 2025
• wondercms A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to... CVE-2024-41305 4.7 MediumJuly 30, 2024
• wondercms An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3... CVE-2024-41304 5.4 MediumJuly 30, 2024
• wondercms A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows... CVE-2024-32746 4.6 MediumApril 17, 2024
• wondercms A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows... CVE-2024-32745 5.9 MediumApril 17, 2024
• wondercms A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows... CVE-2024-32744 4.6 MediumApril 17, 2024
• wondercms A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows... CVE-2024-32743 5.5 MediumApril 17, 2024
• wondercms Multiple cross-site scripting (XSS) vulnerabilities in the Home page of WonderCMS v3.4.3 allows... CVE-2024-32341 5.4 MediumApril 17, 2024
• wondercms A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows... CVE-2024-32340 9.6 CriticalApril 17, 2024
• wondercms Multiple cross-site scripting (XSS) vulnerabilities in the HOW TO page of WonderCMS v3.4.3 allows... CVE-2024-32339 6.1 MediumApril 17, 2024
• wondercms A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows... CVE-2024-32338 5.4 MediumApril 17, 2024
• wondercms A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows... CVE-2024-32337 6.1 MediumApril 17, 2024
• wondercms A Server-Side Request Forgery (SSRF) in the getFileFromRepo function of WonderCMS v3.1.3 allows... CVE-2024-27563 5.3 MediumMarch 5, 2024
• wondercms A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS... CVE-2024-27561 8.1 HighMarch 5, 2024
• wondercms Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to... CVE-2023-41425 Public exploit EPSS 54.3% 6.1 MediumNovember 7, 2023
• wondercms A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute... CVE-2022-43332 Public exploit 6.1 MediumNovember 17, 2022
• wondercms An OS command injection vulnerability in the installUpdateThemePluginAction function in index.php... CVE-2020-35314 Public exploit EPSS 26.9% 9.8 CriticalApril 20, 2021
• wondercms A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function... CVE-2020-35313 Public exploit EPSS 45.2% 9.8 CriticalApril 20, 2021
• wondercms WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This... CVE-2020-29233 Public exploit 5.4 MediumDecember 30, 2020
• wondercms WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This... CVE-2020-29469 Public exploit 5.4 MediumDecember 30, 2020
• wondercms WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Admin Panel. An attacker can... CVE-2020-29247 4.8 MediumDecember 24, 2020
• wondercms 2.6.0 and earlier, wondercms +1 more Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to... CVE-2019-5956 6.5 MediumSeptember 12, 2019
• wondercms An issue was discovered in WonderCMS before 2.5.2. An attacker can create a new session on a web... CVE-2018-14387 8.8 HighJuly 18, 2018
• wondercms In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory... CVE-2018-7172 4.9 MediumFebruary 27, 2018
• wondercms WonderCMS version 2.4.0 contains a Stored Cross-Site Scripting on File Upload through SVG... CVE-2018-1000062 4.4 MediumFebruary 9, 2018
• wondercms ** DISPUTED ** WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses... CVE-2017-14523 Public exploitDisputed 7.5 HighJanuary 26, 2018
• wondercms ** DISPUTED ** In WonderCMS 2.3.1, the application's input fields accept arbitrary user input... CVE-2017-14522 Disputed 6.1 MediumJanuary 26, 2018
• wondercms In WonderCMS 2.3.1, the upload functionality accepts random application extensions and leads to... CVE-2017-14521 Public exploit 8.8 HighJanuary 26, 2018
• wondercms WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context. CVE-2017-7951 8.8 HighApril 21, 2017
• wondercms PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote... CVE-2014-8705 9.8 CriticalMarch 17, 2017
• wondercms Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to... CVE-2014-8704 9.8 CriticalMarch 17, 2017
• wondercms Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject... CVE-2014-8703 6.1 MediumMarch 17, 2017
• wondercms Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the... CVE-2014-8702 5.3 MediumMarch 17, 2017
• wondercms Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files... CVE-2014-8701 7.5 HighMarch 17, 2017
• wondercms Cross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote... CVE-2011-5317 4.3 MediumJanuary 1, 2015