Y
Vendor security profile
yeswiki
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs42
Critical3
CISA KEV0
Public exploit38
Patch rate%10
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
1
0
0
0
1
2
37
CVE KEV
CVE severity distribution
42toplam CVE
Critical3 (7%)
High19 (45%)
Medium20 (48%)
Patch and exploitation view
%10
Verified patch
%0
CISA KEV
%90
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
38Unknown
Latest vulnerabilities
5.1
CVE-2026-105224
YesWiki before 4.6.7 Stored XSS via Bazar valeur Action
Y
Patch verifiedEPSS %0
5.1
CVE-2026-104473
YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpages
Y
Patch status unknownEPSS %0
8.7
CVE-2026-104472
YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler
Y
Patch status unknownEPSS %0
8.6
CVE-2026-104471
YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import
Y
Patch status unknownEPSS %0
5.3
CVE-2026-104470
YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter
Y
Patch verifiedEPSS %0
7.6
CVE-2026-104469
YesWiki before 4.6.7 Session Fixation via Login in AuthController.php
Y
Patch status unknownEPSS %0
6.3
CVE-2026-104468
YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordAction
Y
Patch status unknownEPSS %0
9.2
CVE-2026-104467
YesWiki before 4.6.7 Authorization Bypass via Public API Mode
Y
Patch status unknownEPSS %0
5.1
CVE-2026-104466
YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute
Y
Patch status unknownEPSS %0
5.1
CVE-2026-104465
YesWiki before 4.6.7 Reflected XSS via field Parameter in mail Handler
Y
Patch status unknownEPSS %0