Wolf Cms (Wolfcms) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2026-07-30. Vendor: Wolfcms.
CVEs of Wolf Cms
- CVE-2026-67207 - CVSS 8.8 (high), 2026-07-30: Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authenticated non-administrative users to…
- CVE-2026-67206 - CVSS 8.8 (high), 2026-07-30: Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerController that allows authenticated attackers to create arbitrary PHP…
- CVE-2019-25070 - CVSS 6.1 (medium), 2022-06-09: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in WolfCMS up to 0.8.3.1. It has been rated as problematic. This issue affects some unknown…
- CVE-2012-1932 - CVSS 4.8 (medium), 2020-02-19: A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the…
- CVE-2018-18823 - CVSS 4.8 (medium), 2019-04-25: WolfCMS 0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.
- CVE-2018-18824 - CVSS 4.8 (medium), 2019-04-25: WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.
- CVE-2019-10646 - CVSS 6.1 (medium), 2019-03-30: Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an attacker to insert arbitrary…
- CVE-2018-15842 - CVSS 4.8 (medium), 2018-08-25: WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter.
- CVE-2018-14837 - CVSS 4.8 (medium), 2018-08-10: Wolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI.
- CVE-2018-8814 - CVSS 6.5 (medium), 2018-04-04: Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requests that modify…
- CVE-2018-8813 - CVSS 4.8 (medium), 2018-04-04: Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect users to arbitrary web…
- CVE-2018-1000087 - CVSS 4.8 (medium), 2018-03-13: WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files'…
- CVE-2018-1000084 - CVSS 5.4 (medium), 2018-03-13: WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name (from Layout tab) that can result in low privilege…
- CVE-2018-6890 - CVSS 4.8 (medium), 2018-02-22: Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3.
- CVE-2017-11611 - CVSS 5.4 (medium), 2017-09-08: Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in a…
- CVE-2015-6568 - CVSS 8.8 (high), 2017-04-14: Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not…
- CVE-2015-6567 - CVSS 8.8 (high), 2017-04-14: Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not…
- CVE-2012-1897 - CVSS 6.8 (medium), 2012-10-01: Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijack the authentication of administrators…
