Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.0	KEVEPSS 99%	CVE-2025-48703Control Web Panel · CWP Control Web Panel OS Command Injection Vulnerability Critical9.0KEVEPSS 99%2025-11-04CISA KEVCVE-2025-48703 CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known. KEVEPSS 99%Vulnerability CWP #exploited-in-the-wild	CISA KEV	2025-11-04
High	7.1	EPSS 0.4%	CVE-2024-29116WooThumbs for WooCommerce by Iconic · Cross-site Scripting High7.1EPSS 0.4%2024-03-19CVE Database V5CVE-2024-29116 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IconicWP WooThumbs for WooCommerce by Iconic allows Reflected XSS.This issue affects WooThumbs for WooCommerce by Iconic: from n/a through 5.5.3. EPSS 0.4%Vulnerability IconicWP #cwe-79	CVE Database V5	2024-03-19
Critical	9.8	KEVEPSS 99%	CVE-2022-44877Control Web Panel · CWP Control Web Panel OS Command Injection Vulnerability Critical9.8KEVEPSS 99%2023-01-17CISA KEVCVE-2022-44877 CWP Control Web Panel (formerly CentOS Web Panel) has an OS command injection vulnerability that enables remote attackers to execute arbitrary commands via shell metacharacters in the login parameter. This vulnerability is known to be exploited in the wild and is considered high severity. KEVEPSS 99%Vulnerability CWP #exploited-in-the-wild	CISA KEV	2023-01-17

Showing 1–4 of 4 results · 1 duplicate CVE record merged