Skip to main content
ExploitPublished

WBCE CMS 1.6.4 · Remote Code Execution

Source Exploit-DB RSS Feed

0
Severity
Critical

Rated by Threat Radar

Data as of 22 Apr 2026, 07:07 UTC

What to do

AI-suggested

Until an official fix is available, restrict administrator access to trusted users only and monitor for suspicious droplet creation or modification. Consider disabling or restricting the Droplets module if possible. Follow vendor updates for patches or official mitigations.

Description

WBCE CMS 1.6.4 - Remote Code Execution

Indicators of compromise

Exploit source code

Exploit code for WBCE CMS 1.6.4 - Remote Code Execution1,720 characters
# Exploit Title: WBCE CMS 1.6.4 - Remote Code Execution
# Date: 2024-10-26
# Exploit Author: Chokri Hammedi
# Vendor Homepage: https://wbce.org/
# Software Link: https://github.com/WBCE/WBCE_CMS/releases/tag/v1.6.4
# Version: 1.6.4
# Tested on: Linux (Debian/Parrot OS)


## Vulnerability Description
WBCE CMS version 1.6.4 contains a critical remote code execution
vulnerability in the Droplets module. Authenticated attackers with
administrator privileges can inject and execute arbitrary PHP code,…

References

Community reviews

Loading reviews…