Ppwndoc

Products

Exploited and recent CVEs

• CVE-2025-27413 Medium 6.5 PwnDoc Arbitrary File Write to RCE using Path Traversal in template update from backup templates.json 1.2%
• CVE-2025-27410 Medium 6.5 PwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin 2.1%
• CVE-2025-23044 Medium 6.8 Cross-Site Request Forgery (CSRF) allows creating admin account with POST request 0.3%
• CVE-2024-55652 Medium 6.5 PwnDoc Server-Side Template Injection vulnerability - Sandbox Escape to RCE using custom filters 0.7%
• CVE-2024-55653 Medium 6.5 pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS) 0.6%
• CVE-2024-55602 High 7.6 PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal 0.7%