PatchTheCVEwebitr vulnerabilities and fixes
Recent CVEs affecting webitr, with upgrade or downgrade steps. 11 tracked.
webitr has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-11-28. Highest priority: CVE-2025-9254 (score 52/100).
- CVE-2025-13768 HIGH 7.5 UPGRADE WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers
- CVE-2025-13771 MEDIUM 6.5 UPGRADE WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers t
- CVE-2025-13769 MEDIUM 6.5 UPGRADE WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to injec
- CVE-2025-13770 MEDIUM 6.5 UPGRADE WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to injec
- CVE-2025-9259 MEDIUM 6.5 UPGRADE WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular
- CVE-2025-9258 MEDIUM 6.5 UPGRADE WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular
- CVE-2025-9257 MEDIUM 6.5 UPGRADE WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular
- CVE-2025-9256 MEDIUM 6.5 UPGRADE WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular
- CVE-2025-9255 HIGH 7.5 UPGRADE WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inj
- CVE-2025-9254 CRITICAL 9.8 UPGRADE WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attacke
- CVE-2024-8586 MEDIUM 6.1 UPGRADE WebITR from Uniong has an Open Redirect vulnerability, which allows unauthorized remote attackers to exploit t
FAQ
How do I fix webitr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webitr being exploited right now?
None of the tracked webitr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webitr CVE should I patch first?
CVE-2025-9254 currently ranks highest (52/100): WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attacke.