Vulnerabilities

TI-2025-35190 CVE-2025-55849 · GHSA-pg8p-58cc-f5ff

WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee

HIGH 72

WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00197 Published 2025-09-08 No fix listed CWE-89

TI-2025-24214 CVE-2025-34045 · GHSA-r2vv-r3xx-x6mh

WeiPHP Path Traversal Arbitrary File Read

MEDIUM 51

A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.04197 Published 2025-06-26 No fix listed CWE-22

TI-2020-13827 CVE-2020-20300 · GHSA-gv8v-gq5v-5rpc

SQL injection vulnerability in the wp_where function in WeiPHP 5.0.

MEDIUM 53

SQL injection vulnerability in the wp_where function in WeiPHP 5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08752 Published 2020-12-18 No fix listed CWE-89

TI-2020-13826 CVE-2020-20299 · GHSA-pcr3-5frq-ww46

WeiPHP 5.0 does not properly restrict access to pages, related to using POST.

LOW 36

WeiPHP 5.0 does not properly restrict access to pages, related to using POST.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01479 Published 2020-12-18 No fix listed

Vulnerabilities

Filters

WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee

WeiPHP Path Traversal Arbitrary File Read

SQL injection vulnerability in the wp_where function in WeiPHP 5.0.

WeiPHP 5.0 does not properly restrict access to pages, related to using POST.