Privilege Escalation Vulnerability in WBCE CMS by WBCE Team

CVE-2025-65094

What is CVE-2025-65094?

WBCE CMS, a content management system, prior to version 1.6.4, is susceptible to a privilege escalation vulnerability. A low-privileged user can exploit this flaw by manipulating the 'groups[]' parameter in the /admin/users/save.php request. Although the user interface limits group assignments to existing groups, the absence of server-side validation enables an attacker to overwrite their group membership. Successful exploitation grants the attacker full administrative access, leading to a total compromise of the CMS and its content. A patch addressing this issue is available in version 1.6.4.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References