WG
Product
wger
18
CVEs
0
On KEV
9.9
Max CVSS
5
New 30D
Severity mix
Critical 1High 5Medium 11Low 1
Watch
Add wger to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43978 | 8.1 | Jul 16 | wger: Privilege escalation via trainer-login session chaining allows gym trainers to impersonate gym managers Affected: < 2.6 |
| CVE-2026-40474 | 7.6 | Apr 17 | wger has Broken Access Control in the Global Gym Configuration Update Endpoint Affected: < 2.5 |
| CVE-2026-43977 | 7.5 | Jul 16 | wger IDOR: Authenticated Users Can Read Others' Private Workout Session Data via Template Routine API Affected: < 2.6 |
| CVE-2026-46434 | 7.1 | Oct 7 | wger: Trainer Privilege Escalation - Improper Privilege Management Affected: < 2.6 |
| CVE-2026-43976 | 7.1 | Oct 7 | wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views) Affected: < 2.6 |
Showing 5