Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Wpanel Cms Project records in CISA KEVNo Wpanel Cms Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 42
Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2) Posts Folder image, (3) Pages Folder image and (4) Gallery Folde…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01822 · Published 2022-03-31 · No fix listed CWE-434
Open these records in search →