Known vulnerabilities in Wekan 11.11 - page 2

Software: Wekan
Version: 11.11
Software CPE: cpe:2.3:a:wekan.github.io:wekan:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Wekan version 11.11 Wekan 11.11 is affected by 30 vulnerabilities: 2 high, 9 medium, 19 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147308 - Authorization Bypass Through User-Controlled SQL Primary Key
CWE-566 Medium
No
No
11.15 07.09.2026 SB2026090797
#VU147307 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
11.15 07.09.2026 SB2026090797
#VU146605 - Authorization Bypass Through User-Controlled Key
CWE-639 Medium
Public exploit available
No
11.16 01.09.2026 SB2026090140
#VU146604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
Public exploit available
No
11.21 01.09.2026 SB2026090143
#VU146603 - Missing Authorization
CWE-862 Medium
Public exploit available
No
11.21 01.09.2026 SB2026090143
#VU146600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
Public exploit available
No
11.21 01.09.2026 SB2026090143
#VU146574 - Missing Authorization
CWE-862 Medium
Public exploit available
No
11.22 01.09.2026 SB2026090141
#VU146569 - Sensitive Cookie Without 'HttpOnly' Flag
CWE-1004 Low
Public exploit available
No
11.27 01.09.2026 SB2026090142
#VU146545 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
Public exploit available
No
11.27 01.09.2026 SB2026090142
#VU146544 - Improper Neutralization of Special Elements in Data Query Logic
CWE-943 Medium
Public exploit available
No
11.27 01.09.2026 SB2026090142


Showing elements 21 - 40 out of 30