WebsiteBaker CMS vulnerabilities

2 known vulnerabilities in WebsiteBaker CMS from WebsiteBaker Org e.V.. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WebsiteBaker CMS: Unrestricted Upload of File with Dangerous Type

  CVE-2026-61524Aug 3, 2026WebsiteBaker Org e.V.EPSS 1.03%

  WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongsi

• 7.2 High severity

  WebsiteBaker CMS: Improper Control of Generation of Code

  CVE-2026-61523Aug 3, 2026WebsiteBaker Org e.V.EPSS 1.19%

  WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a