Login Request a demo
YE
Product
yeswiki
by YesWiki · last CVE Oct 26, 2026
85
CVEs
0
On KEV
9.8
Max CVSS
54
New 30D
Vulnerabilities85In the news0Timeline
Severity mix
Critical 9High 27Medium 49Low 0
Severity
All severities85Critical9High27Medium49Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add yeswiki to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46670
9.8
2%
Aug 11
YesWiki: Unauthenticated SQL Injection
Affected: < 4.6.4
CVE-2026-52778
9.8
1%
Jun 8
YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS)
Affected: < 4.6.6
CVE-2025-46348
9.8
1%
Apr 29
YesWiki is a wiki system written in PHP
Affected: before 4.5.4
CVE-2025-46347
9.8
1%
Apr 29
YesWiki is a wiki system written in PHP
Affected: before 4.5.4
CVE-2018-1000641
9.8
2%
Aug 20
YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code,…
Affected: 2012-10-22-1; 2013-10-17-1; 2016-03-17-1
CVE-2026-52777
9.4
0%
Sep 4
YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
Affected: < 4.6.6
CVE-2026-116207
New
9.1
0%
Oct 25
YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API
Affected: 4.6.0 before 4.7.0; 5.0.0-alpha1 before 5.0.0-alpha4
CVE-2026-52766
9.1
1%
Sep 4
YesWiki: Unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action
Affected: < 4.6.6
CVE-2024-51478
9.1
0%
Oct 31
YesWiki is a wiki system written in PHP
Affected: before 4.4.5
Showing 9