WeiPHP vulnerabilities

1 known vulnerability in WeiPHP from Shenzhen Yuanmengyun Technology. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WeiPHP: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-34045Jun 26, 2025Shenzhen Yuanmengyun TechnologyEPSS 4.2%

  A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_i