PatchTheCVEwowonder vulnerabilities and fixes
Recent CVEs affecting wowonder, with upgrade or downgrade steps. 6 tracked.
wowonder has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-11-15. Highest priority: CVE-2021-27200 (score 66/100).
- CVE-2022-42984 CRITICAL 9.8 DOWNGRADE WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset
- CVE-2022-40405 HIGH 7.5 DOWNGRADE WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset
- CVE-2022-26254 MEDIUM 5.3 DOWNGRADE WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue whi
- CVE-2022-1753 MEDIUM 5.4 MITIGATE A vulnerability, which was classified as critical, was found in WoWonder
- CVE-2021-27200 CRITICAL 9.8 DOWNGRADE In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recov
- CVE-2021-26935 HIGH 7.5 UPGRADE In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-f
FAQ
How do I fix wowonder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wowonder being exploited right now?
None of the tracked wowonder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wowonder CVE should I patch first?
CVE-2021-27200 currently ranks highest (66/100): In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recov.