WBCE vulnerabilities
9 published CVEs name WBCE among the affected products.
- 9Published CVEs9 of them scored
- 7Last 12 monthspublished in the last year
- 3Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2022-50936
WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)
Wbce · WBCE CMS
High8.7 - CVE-2025-34506
WBCE CMS <= 1.6.3 Authenticated Remote Code Execution via Module Upload
WBCE · WBCE CMS
High8.6 - CVE-2024-58283
WBCE CMS 1.6.2 Remote Code Execution via Elfinder File Upload
wbce · WBCE CMS
High8.7 - CVE-2025-65950
WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter
WBCE · WBCE_CMS
Critical9.4 - CVE-2025-67504
WBCE CMS has Weak Random Number Generator in Password Generation Function
WBCE · WBCE_CMS
Critical9.1 - CVE-2025-66204
WBCE CMS allows brute-force protection bypass using X-Forwarded-For header
WBCE · WBCE_CMS
Medium6.3 - CVE-2025-65094
WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR)
WBCE · WBCE_CMS
High8.7 - CVE-2022-4006
WBCE CMS Header class.login.php increase_attempts excessive authentication
WBCE · CMS
Low3.7 - CVE-2021-3817
SQL Injection in wbce/wbce_cms
wbce · wbce/wbce_cms
Critical9.8