Wbce
20 CVEs tracked since 2022. Since Nov 2022, none of them reached CISA KEV.
Wbce CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-11 | 12 | 0 |
| 2022-12 | 3 or fewer | |
| 2023-01 | 3 or fewer | |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 3 or fewer | |
| 2023-06 | 4 or fewer | |
| 2023-07 | 3 or fewer | |
| 2023-08 | 4 or fewer | |
| 2023-09 | 3 or fewer | |
| 2023-10 | 4 or fewer | |
| 2023-11 | 4 or fewer | |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 4 or fewer | |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 8 | 0 |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Wbce's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Wbce.
- CVE-2022-50936WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)8.8
- CVE-2023-53910WBCE CMS 1.6.1 Stored Cross-Site Scripting via Page Content5.4
- CVE-2023-53909WBCE CMS 1.6.1 SVG File Content Cross-Site Scripting5.4
- CVE-2023-53901WBCE CMS 1.6.1 Cross-Site Scripting and Open Redirect Vulnerability5.4
- CVE-2025-34506WBCE CMS 1.6.3 Authenticated Remote Code Execution via Module Upload8.8
- CVE-2024-58283WBCE CMS 1.6.2 Remote Code Execution via Elfinder File Upload8.8
- CVE-2025-65950WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter8.8
- CVE-2025-67504WBCE CMS has Weak Random Number Generator in Password Generation Function9.1
- CVE-2025-66204WBCE CMS allows brute-force protection bypass using X-Forwarded-For header8.1
- CVE-2025-65094WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR)8.8
- CVE-2023-39796SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter.9.8
- CVE-2023-46054Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script to the website_footer parameter in the admin/settings/sa...5.4
- CVE-2023-43871A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).5.4
- CVE-2023-38947An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.7.2
- CVE-2023-29855WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php.7.2
The record
- Peak rank
- #70 in Nov 2022
- Busiest month shown
- Nov 2022, 12 CVEs
- Months with a KEV entry
- 0 since Nov 2022
- Monthly snapshots
- 2 since 2022