Slackero vulnerabilities
We track 4 vulnerabilities in Slackero products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.
Latest Slackero vulnerabilities
- 7.3 High severity
phpwcms: Improper Access Control
A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POST_name causes unrestric
- 9.8 Critical severity
phpwcms: Deserialization of Untrusted Data
A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function is_file/getimagesize of the file image_resized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to lau
- 7.2 High severity
phpwcms: Deserialization of Untrusted Data
A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been rated as critical. This issue affects the function file_get_contents/is_file of the file include/inc_lib/content/cnt21.readform.inc.php of the component Custom Source Tab. The manip
- 9.8 Critical severity
phpwcms: Deserialization of Untrusted Data
A vulnerability was detected in slackero phpwcms up to 1.9.45/1.10.8. The impacted element is an unknown function of the file include/inc_module/mod_feedimport/inc/processing.inc.php of the component Feedimport Module. Performing manipulation of the argument c