Wolfcms · weakness class

Input Validation and Logic

3 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Connect AI

likely to be exploited: 2

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "fil…CVE-2015-6567Wolfcms · 11% likely
CWE-20
Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent a change of a file…CVE-2015-6568Wolfcms · 11% likely
CWE-20
Wolf CMS 0.8.3.1 Authorization Bypass via BackupRestoreControllerCVE-2026-67207wolfcms · CVSS 8.8 · 0.5% likely
CWE-697

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.