PatchTheCVEwondercms vulnerabilities
Recent CVEs affecting wondercms products. 3 tracked.
wondercms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-02. Highest priority: CVE-2025-3123 (score 33/100).
- CVE-2025-3123 MEDIUM 4.7 DOWNGRADE A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0
- CVE-2024-41305 MEDIUM 4.7 DOWNGRADE A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the app
- CVE-2024-41304 MEDIUM 5.4 DOWNGRADE An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers
FAQ
How do I fix wondercms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wondercms being exploited right now?
None of the tracked wondercms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wondercms CVE should I patch first?
CVE-2025-3123 currently ranks highest (33/100): A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0.