CVE-2025-5149 | Medium | 5.6 | 2025-05-25 | A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /in… |
CVE-2025-3800 | High | 7.3 | 2025-04-19 | A vulnerability has been found in WCMS 11 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/controllers/An… |
CVE-2025-3799 | High | 7.3 | 2025-04-19 | A vulnerability, which was classified as critical, was found in WCMS 11. Affected is an unknown function of the file app/controllers/AnonymousController.php. T… |
CVE-2025-3798 | Medium | 4.7 | 2025-04-19 | A vulnerability, which was classified as critical, has been found in WCMS 11. This issue affects the function sub of the file app/admin/AdvadminController.php… |
CVE-2025-2979 | Low | 2.4 | 2025-03-31 | A vulnerability classified as problematic has been found in WCMS 11. This affects an unknown part of the file /index.php?anonymous/setregister of the component… |
CVE-2025-2978 | Medium | 6.3 | 2025-03-31 | A vulnerability was found in WCMS 11. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php?articleadmin/u… |
CVE-2024-8875 | Medium | 5.4 | 2024-09-15 | A vulnerability classified as critical was found in vedees wcms up to 0.3.2. Affected by this vulnerability is an unknown functionality of the file /wex/finder… |
CVE-2020-19902 | Critical | 9.8 | 2023-06-27 | Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter. |
CVE-2023-31689 | Critical | 9.8 | 2023-05-22 | In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the text… |
CVE-2020-24140 | High | 8.3 | 2021-04-07 | Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via the pagename param… |
CVE-2020-24139 | High | 8.3 | 2021-04-07 | Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path paramete… |
CVE-2020-24137 | Medium | 5.3 | 2021-04-07 | Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter… |
CVE-2020-24135 | Medium | 6.1 | 2021-04-07 | A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web script and HTML via th… |
CVE-2020-24138 | Medium | 6.1 | 2021-04-07 | Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML via the pagename parameter to wex/html.p… |
CVE-2020-24136 | High | 8.6 | 2021-04-07 | Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/htm… |
CVE-2019-14240 | High | 8.1 | 2019-07-23 | WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html URI. |
CVE-2019-11377 | High | 8.8 | 2019-04-20 | wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_… |