PatchTheCVEphpwcms vulnerabilities
Recent CVEs affecting phpwcms products. 4 tracked.
phpwcms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-01-16. Highest priority: CVE-2025-5499 (score 49/100).
- CVE-2025-5499 HIGH 7.3 UPGRADE A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8
- CVE-2025-5498 MEDIUM 5.5 UPGRADE A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8
- CVE-2025-5497 MEDIUM 6.3 UPGRADE A vulnerability was detected in slackero phpwcms up to 1.9.45/1.10.8
- CVE-2021-47783 MEDIUM 5.4 DOWNGRADE Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SV
FAQ
How do I fix phpwcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpwcms being exploited right now?
None of the tracked phpwcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpwcms CVE should I patch first?
CVE-2025-5499 currently ranks highest (49/100): A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8.