Vulnerabilities

TI-2026-29226 CVE-2026-40474 · GHSA-xppv-4jrx-qf8m

wger has Broken Access Control in the Global Gym Configuration Update Endpoint

HIGH 66

wger is a free, open-source workout and fitness manager.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00333 Published 2026-04-17 Fixed in 2.5 CWE-284

TI-2026-29128 CVE-2026-40353 · GHSA-6f54-qjvm-wwq3

MEDIUM 56

wger is a free, open-source workout and fitness manager.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00207 Published 2026-04-17 Fixed in 2.5 CWE-79

TI-2026-22190 CVE-2026-27839 · GHSA-g8gc-6c4h-jg86

MEDIUM 53

wger is a free, open-source workout and fitness manager.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00304 Published 2026-02-26 No fix listed CWE-639

TI-2026-22189 CVE-2026-27838 · GHSA-42cr-w2gr-m54q

MEDIUM 50

wger is a free, open-source workout and fitness manager.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00294 Published 2026-02-26 No fix listed CWE-639

TI-2026-22186 CVE-2026-27835 · GHSA-xf68-8hjw-7mpm

MEDIUM 53

wger is a free, open-source workout and fitness manager.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2026-02-26 No fix listed CWE-639

TI-2022-02450 CVE-2022-2650 · GHSA-gr58-76rp-mmg4

HIGH 76

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2022-11-24 Fixed in 2.2 CWE-307