Vulnerabilities in wbce
9 resultsVexday analysis
O WBCE apresenta uma pegada de risco reduzida com apenas 2 CVEs catalogadas, nenhuma delas sob exploração ativa conhecida. A vulnerabilidade crítica identificada está relacionada a upload de arquivo (CWE-434), representando o principal vetor de risco, mas sem evidência de ataques em curso ou divulgações recentes.
CVE-2021-3817CRITICALSQL Injection in wbce/wbce_cmsEPSS 38.4%CVE-2025-34506HIGHWBCE CMS 1.6.3 Authenticated Remote Code Execution via Module UploadEPSS 0.9%CVE-2022-4006LOWWBCE CMS Header class.login.php increase_attempts excessive authenticationEPSS 0.8%CVE-2022-50936HIGHWBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)EPSS 0.8%CVE-2024-58283HIGHWBCE CMS 1.6.2 Remote Code Execution via Elfinder File UploadEPSS 0.7%CVE-2025-65950CRITICALWBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] ParameterEPSS 0.5%CVE-2025-67504CRITICALWBCE CMS has Weak Random Number Generator in Password Generation FunctionEPSS 0.5%CVE-2025-66204MEDIUMWBCE CMS allows brute-force protection bypass using X-Forwarded-For headerEPSS 0.5%CVE-2025-65094HIGHWBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR)EPSS 0.4%