📦 Wowonder

by Wowonder

🔍 What is Wowonder?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-27200

CRITICAL CVSS 9.8 Jun 11, 2021

CVE-2021-27200 is a critical authentication bypass vulnerability in WoWonder's password recovery system. Attackers can predict password reset codes based on time of day, allowing them to take over any...

CVE-2021-26935

HIGH CVSS 7.5 Mar 18, 2021

This SQL injection vulnerability in WoWonder allows remote attackers to execute arbitrary SQL commands via the event_id parameter in the requests.php?f=search-my-followers endpoint. Successful exploit...