WBCE vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 20256
4. 20261

Newest CVEs

• CVE-2022-50936

  WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)

  Wbce · WBCE CMS

  High8.7
• CVE-2025-34506

  WBCE CMS <= 1.6.3 Authenticated Remote Code Execution via Module Upload

  WBCE · WBCE CMS

  High8.6
• CVE-2024-58283

  WBCE CMS 1.6.2 Remote Code Execution via Elfinder File Upload

  wbce · WBCE CMS

  High8.7
• CVE-2025-65950

  WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter

  WBCE · WBCE_CMS

  Critical9.4
• CVE-2025-67504

  WBCE CMS has Weak Random Number Generator in Password Generation Function

  WBCE · WBCE_CMS

  Critical9.1
• CVE-2025-66204

  WBCE CMS allows brute-force protection bypass using X-Forwarded-For header

  WBCE · WBCE_CMS

  Medium6.3
• CVE-2025-65094

  WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR)

  WBCE · WBCE_CMS

  High8.7
• CVE-2022-4006

  WBCE CMS Header class.login.php increase_attempts excessive authentication

  WBCE · CMS

  Low3.7
• CVE-2021-3817

  SQL Injection in wbce/wbce_cms

  wbce · wbce/wbce_cms

  Critical9.8