Wgstart vulnerabilities
We track 2 vulnerabilities in Wgstart products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Wgstart vulnerabilities
- 7.5 High severity
Wgcloud: Improper Limitation of a Pathname to a Restricted Directory
There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server.
- 7.5 High severity
Wgcloud: Server-Side Request Forgery
The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and