Wenkucms Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wenkucms Project records in CISA KEV

No Wenkucms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wenkucms 2 records MEDIUM

Records

2 records

TI-2025-10206 CVE-2025-11138 · GHSA-q85v-72rw-rp2j

mirweiye wenkucms common.php createPathOne os command injection

MEDIUM 57

A vulnerability was found in mirweiye wenkucms up to 3.4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.04201 Published 2025-09-29 No fix listed CWE-77

TI-2020-13545 CVE-2020-19157 · GHSA-8hjf-39rr-pc66

Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary…

LOW 29

Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01018 Published 2021-09-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0