Vulnerabilities in WBCE
9 resultsVexday analysis
O WBCE apresenta um perfil de risco baixo com apenas 6 vulnerabilidades registradas, nenhuma sob ataque ativo no momento. Das falhas conhecidas, 2 são críticas e predominam problemas de controle de permissões (CWE-266), porém não há descobertas recentes nos últimos 90 dias, indicando estabilidade relativa do fornecedor.
CVE-2021-3817CRITICALSQL Injection in wbce/wbce_cmsEPSS 38.4%CVE-2025-34506HIGHWBCE CMS 1.6.3 Authenticated Remote Code Execution via Module UploadEPSS 0.9%CVE-2022-4006LOWWBCE CMS Header class.login.php increase_attempts excessive authenticationEPSS 0.8%CVE-2022-50936HIGHWBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)EPSS 0.8%CVE-2024-58283HIGHWBCE CMS 1.6.2 Remote Code Execution via Elfinder File UploadEPSS 0.7%CVE-2025-65950CRITICALWBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] ParameterEPSS 0.5%CVE-2025-67504CRITICALWBCE CMS has Weak Random Number Generator in Password Generation FunctionEPSS 0.5%CVE-2025-66204MEDIUMWBCE CMS allows brute-force protection bypass using X-Forwarded-For headerEPSS 0.5%CVE-2025-65094HIGHWBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR)EPSS 0.4%