WWBCE

Products

Exploited and recent CVEs

• CVE-2022-50936 High 8.8 WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated) 0.9%
• CVE-2025-34506 High 8.6 WBCE CMS <= 1.6.3 Authenticated Remote Code Execution via Module Upload 0.9%
• CVE-2024-58283 High 8.7 WBCE CMS 1.6.2 Remote Code Execution via Elfinder File Upload 0.7%
• CVE-2025-65950 Critical 9.4 WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter 0.5%
• CVE-2025-67504 Critical 9.1 WBCE CMS has Weak Random Number Generator in Password Generation Function 0.5%
• CVE-2025-66204 Medium 6.3 WBCE CMS allows brute-force protection bypass using X-Forwarded-For header 0.5%
• CVE-2025-65094 High 8.7 WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR) 0.4%
• CVE-2022-4006 Low 3.7 WBCE CMS Header class.login.php increase_attempts excessive authentication 0.9%
• CVE-2021-3817 Critical 9.8 SQL Injection in wbce/wbce_cms 38.4%