VYPR

WBCE-v1.6.3-Authenticated-RCE

by Swammers8

CVEs (1)

  • CVE-2025-34506HigDec 11, 2025
    risk 0.57cvss 8.8epss 0.01

    WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the…