WonderCMS 3.1.3
Approved changes feed: RSS · Atom
cpe:2.3:a:wondercms:wondercms:3.1.3:*:*:*:*:*:*:*
part: a version: 3.1.3 update: *
| Vendor | Wondercms (0662ffc5-32b5-5dde-87bb-37e881a45788) |
|---|---|
| Product | Wondercms (0877b2ee-e4a9-5f4c-ab49-b9b2fbb88185) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/robiso/wondercms |
purl2cpe | 2026-06-01 10:13:28.638332 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-27563 |
vulnerable | 2026-06-08 06:31:29.035523 |
Details available
A Server-Side Request Forgery (SSRF) in the getFileFromRepo function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.
Published: 2024-03-05T00:00:00.000Z
Updated: 2024-08-29T15:29:28.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27561 |
vulnerable | 2026-06-08 06:31:29.035088 |
Details available
A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the installThemePlugin parameter.
Published: 2024-03-05T00:00:00.000Z
Updated: 2024-08-27T19:28:28.726Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35314 |
vulnerable | 2026-06-08 05:25:01.021839 |
Details available
A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer.
Published: 2021-04-20T19:25:54.000Z
Updated: 2024-08-04T17:02:07.444Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35313 |
vulnerable | 2026-06-08 05:25:01.021491 |
Details available
A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL to the theme/plugin installer.
Published: 2021-04-20T19:05:37.000Z
Updated: 2024-08-04T17:02:07.570Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29469 |
vulnerable | 2026-06-08 05:24:58.255646 |
Details available
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attacker to inject the XSS payload in the Setting - Menu and each time any user will visits the website directory, the XSS triggers and attacker can steal the cookie according to the crafted payload.
Published: 2020-12-30T14:47:51.000Z
Updated: 2024-08-04T16:55:09.819Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29247 |
vulnerable | 2026-06-08 05:24:58.044782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29233 |
vulnerable | 2026-06-08 05:24:58.035017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.