Wellcms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wellcms records in CISA KEV

No Wellcms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Wellcms · all components

TI-2022-16888 CVE-2022-36579 · GHSA-437h-8p4c-5p9r

LOW 38

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00417 Published 2022-08-19 No fix listed CWE-352

TI-2020-13965 CVE-2020-21005 · GHSA-w6gx-rprc-p2qj

LOW 30

WellCMS 2.0 beta3 is vulnerable to File Upload.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0081 Published 2021-06-03 No fix listed CWE-434