Login Request a demo
WC
Product
wcms
by vincent-peugnet · last CVE Oct 3, 2026
2
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 1Medium 1Low 0
Severity
All severities2Critical0High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add wcms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105123
8.8
1%
Oct 3
W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API
Affected: through 3.18.0
CVE-2026-105124
6.1
0%
Oct 3
W (wcms) through 3.18.0 Unauthenticated Stored XSS via Login Username and Comments
Affected: through 3.18.0
Showing 2