Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
wger-project records in CISA KEVNo wger-project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 76
Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00738 · Published 2022-11-24 · Fixed in 2.2 CWE-307
Priority HIGH 66
wger is a free, open-source workout and fitness manager.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00333 · Published 2026-04-17 · Fixed in 2.5 CWE-284
Priority MEDIUM 56
wger is a free, open-source workout and fitness manager.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00207 · Published 2026-04-17 · Fixed in 2.5 CWE-79
Priority MEDIUM 53
wger is a free, open-source workout and fitness manager.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00304 · Published 2026-02-26 · No fix listed CWE-639
Priority MEDIUM 53
wger is a free, open-source workout and fitness manager.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00295 · Published 2026-02-26 · No fix listed CWE-639
Priority MEDIUM 50
wger is a free, open-source workout and fitness manager.
CVSS 3.1LOW 3.5· Network · Low privileges · User interaction · EPSS 0.00294 · Published 2026-02-26 · No fix listed CWE-639
