Back to Database
Status published
Medium
CVE-2018-7172
In index.php in WonderCMS before 2.4.1, remote attackers can delete...
Vulnerability Description
In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-7172
Credits & Attribution
No credits recorded in the NVD database.
References
More from wondercms
View All →CVE-2024-58305
WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation
High
8.6
CVE-2022-43332
A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers...
Unknown
0
CVE-2020-35314
A remote code execution vulnerability in the installUpdateThemePluginAction function in...
Critical
9.8
CVE-2020-35313
A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function...
Critical
9.8
CVE-2020-29469
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the...
Medium
5.4
Affected Vendor
wondercms
View all reports →Affected Software
wondercms
Vulnerable Versions:
0
Timeline
Official Publish:
February 27th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.