cve.bz

wppconnect wppconnect-server vulnerabilities, newest first

Filter
  1. 6.9CVE-2026-123197EPSS 0.4%

    WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that allows unauthenticated attackers to read decrypted sticker media through the /files static mount. Attackers can enumerate Unix timestamps in GET /files/…

  2. 8.2CVE-2026-121557EPSS 0.4%

    WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers to send WhatsApp messages by calling the Chatwoot webhook route without verifyToken middleware. Attackers who know or g…