Wftpserver vulnerabilities
5 published CVEs name Wftpserver among the affected products; CISA lists 2 of them as exploited in the wild.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 2Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2025-47813
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
wftpserver · Wing FTP Server
ExploitedMedium4.3 - CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session…
wftpserver · Wing FTP Server
ExploitedCritical10.0