Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

bww vulnerabilities

3 published CVEs name bww among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
2
Critical
0
Known exploited
0

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20251
  3. 20261

Newest CVEs

  • CVE-2025-14120

    URL Image Importer <= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    bww · URL Image Importer

    Medium6.4
  • CVE-2025-12138

    URL Image Importer <= 1.0.6 - Authenticated (Author+) Arbitrary File Upload

    bww · URL Image Importer

    High8.8
  • CVE-2024-8538

    Big File Uploads <= 2.1.2 - Authenticated (Author+) Full Path Disclosure

    bww · Big File Uploads – Increase Maximum File Upload Size

    Medium4.3

Products with the most CVEs

  1. URL Image Importer2
  2. Big File Uploads – Increase Maximum File Upload Size1

Most common weaknesses

  1. CWE-200 Exposure of sensitive information1
  2. CWE-22 Path traversal1
  3. CWE-434 Unrestricted file upload1
  4. CWE-79 Cross-site scripting (XSS)1