Skip to content
OpenAdvisories

Product · vincent-peugnet

wcms

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-105123

    W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

    W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/[*:path]. Attackers can upload .php files executed b…

    vincent-peugnet wcms