Wgcloud vulnerabilities

2 known vulnerabilities in Wgcloud from Wgstart. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Wgcloud: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-30403Mar 19, 2026Wgstart

  There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server.

• 7.5 High severity

  Wgcloud: Server-Side Request Forgery

  CVE-2026-30404Mar 19, 2026Wgstart

  The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability. This issue can be exploited to make the server send requests to probe the internal network, remotely download malicious files, and