WisdmLabs vulnerabilities
We track 4 vulnerabilities in WisdmLabs products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
Latest WisdmLabs vulnerabilities
- 8.8 High severity
Edwiser Bridge: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Cross Site Request Forgery.This issue affects Edwiser Bridge: from n/a through 4.3.4.
- 8.6 High severity
Edwiser Bridge: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge.This issue affects Edwiser Bridge: from n/a through <= 3.0.7.
- 9.8 Critical severity
Edwiser Bridge – WordPress Moodle Integration: Authentication Bypass Using an Alternate Path or Channel
The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verification_key' default value is empty, and the not empty check is missing in the 'eb_user_email_verify'
- 7.2 High severity
Edwiser Bridge: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2.