Vendors / Weiphp Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Weiphp records in CISA KEV No Weiphp vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee
CVSS 3.1 HIGH 8.4· Local · No auth · No interaction · EPSS 0.00197 · Published 2025-09-08 · No fix listed CWE-89
Priority MEDIUM 53
SQL injection vulnerability in the wp_where function in WeiPHP 5.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08752 · Published 2020-12-18 · No fix listed CWE-89
Priority MEDIUM 51
A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.04197 · Published 2025-06-26 · No fix listed CWE-22
Priority LOW 36
WeiPHP 5.0 does not properly restrict access to pages, related to using POST.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01479 · Published 2020-12-18 · No fix listed
Open these records in search → All records by CVSS severity
1 3 0 0 0
