https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-42185.htmlhttps://patchthecve.com/cve/CVE-2021-42185.htmlWed, 17 Jun 2026 04:09:26 +0000CRITICAL 9.8: wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function.https://patchthecve.com/cve/CVE-2020-20982.htmlhttps://patchthecve.com/cve/CVE-2020-20982.htmlWed, 17 Jun 2026 03:03:29 +0000CRITICAL 9.6: Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php.https://patchthecve.com/cve/CVE-2020-21658.htmlhttps://patchthecve.com/cve/CVE-2020-21658.htmlWed, 17 Jun 2026 03:03:50 +0000MEDIUM 6.5: A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.https://patchthecve.com/cve/CVE-2020-21648.htmlhttps://patchthecve.com/cve/CVE-2020-21648.htmlWed, 17 Jun 2026 03:03:49 +0000CRITICAL 9.1: WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php.https://patchthecve.com/cve/CVE-2020-23631.htmlhttps://patchthecve.com/cve/CVE-2020-23631.htmlWed, 17 Jun 2026 03:04:52 +0000MEDIUM 6.1: Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via the tongji parameter.