Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Wbce

First CVE: Apr 28, 2017Active for: 9 yearsTotal CVEs: 40
51.7
VTI Score
TOP TARGET

WBCE is a content management system platform that, despite a narrow product portfolio, maintains a more prominent presence in the vulnerability landscape than its focused scope might suggest. Vulnerabilities affecting the vendor skew toward moderate severity and frequently acquire public exploit code, reflecting the web-application attack surface inherent to CMS platforms. The exposure recurs through application-layer weakness classes including cross-site scripting, unsafe file uploads, SQL injection, and brute-force authentication flaws, which are characteristic of server-side web frameworks handling user input and file handling. Defenders should treat WBCE instances as requiring regular patch cycles and input-validation hardening, particularly where the CMS is internet-exposed; current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
40
Total CVEs
More Total CVEs than 98% of tracked vendors
5.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 97% of tracked vendors
6.7
Avg CVSS Score
Higher Avg CVSS Score than 44% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Wbce over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 28, 2017
9 years ago
Most Recent CVE
Jan 13, 2026
192 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (40 CVEs).

40 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-3817CRITICAL
wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
Dec 9, 20219.865NOYES
CVE-2022-46020CRITICAL
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.
Dec 20, 20229.864NOYES
CVE-2023-39796CRITICAL
SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter.
Nov 10, 20239.841NOYES
CVE-2025-67504CRITICAL
WBCE CMS is a content management system. Versions 1.6.4 and below use function GenerateRandomPassword() to create passwords using PHP's rand(). rand() is not cryptographically secu
Dec 9, 20259.834NONO
CVE-2022-50936HIGH
WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious droplets through the admin panel. Authenticated attac
Jan 13, 20268.831NONO
CVE-2022-45038MEDIUM
A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected i
Nov 25, 20225.429NOYES
CVE-2025-34506HIGH
WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a special
Dec 11, 20258.828NONO
CVE-2024-58283HIGH
WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager. Attackers
Dec 10, 20258.828NONO
CVE-2025-65094HIGH
WBCE CMS is a content management system. Prior to version 1.6.4, a low-privileged user in WBCE CMS can escalate their privileges to the Administrators group by manipulating the gro
Nov 19, 20258.828NONO
CVE-2022-30073MEDIUM
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.
May 17, 20225.428NOYES
View all 40 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products40 CVEs
53%
38%
10%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (5.0%)
Network38 (95.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low39 (97.5%)
High1 (2.5%)
Unknown0 (0.0%)
User Interaction
None17 (42.5%)
Unknown0 (0.0%)
Required23 (57.5%)
Privileges Required
Low15 (37.5%)
High13 (32.5%)
None12 (30.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (40 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
5 CVEs
12.5% of CVEs· 97th percentile
ExploitDB
1 CVE
2.5% of CVEs· 74th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Wbce.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Wbce — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Wbce's Products

View all 6 CNAs →

Top CWEs