Apache Wicket Vulnerabilities

Apache Apache Wicket vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

27 July 2026

Insufficient Random Value Vulnerability in Apache Wicket
CVE-2026-66391
ApacheApache Wicket6.5MEDIUM
Cross-site Scripting Vulnerability in Apache Wicket by Apache
CVE-2026-66390
ApacheApache Wicket6.1MEDIUM

6 May 2026

Session Fixation Vulnerability in Apache Wicket Affecting Multiple Versions
CVE-2026-40010
ApacheApache Wicket9.1CRITICAL
Cross-site Scripting Vulnerability in Apache Wicket by Apache
CVE-2026-42509
ApacheApache Wicket6.1MEDIUM
Sensitive Information Exposure in Apache Wicket by Apache
CVE-2026-43646
ApacheApache Wicket7.5HIGH
Directory Traversal Vulnerability in Apache Wicket File Management
CVE-2026-43975
ApacheApache Wicket6.5MEDIUM

23 January 2025

Denial of Service Vulnerability in Apache Wicket by Apache
CVE-2024-53299
ApacheApache Wicket6.5MEDIUM

12 July 2024

Apache Wicket: Remote code execution via XSLT injection
CVE-2024-36522
ApacheApache Wicket9.8CRITICAL

19 March 2024

Bypass of CSRF Protection in Apache Wicket Due to Error in Evaluation of Fetch Metadata Headers
CVE-2024-27439
ApacheApache Wicket6.5MEDIUM

25 May 2021

DNS proxy and possible amplification attack
CVE-2021-23937
ApacheApache Wicket7.5HIGH

11 August 2020

HTML Template Exposure in Apache Wicket Versions
CVE-2020-11976
ApacheApache Wicket7.5HIGH

3 October 2017