Products: 1
Vulnerabilities: 14
Known Exploited: 0
1
Critical Level Threats
5
High Level Threats
7
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-46438
wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry
Last Modified: Oct 07, 2026
Published: Oct 07, 2026
CVE-2026-46437
wger: API credentials remain valid after logout/password change
Last Modified: Oct 10, 2026
Published: Oct 07, 2026
CVE-2026-46434
wger: Trainer Privilege Escalation - Improper Privilege Management
Last Modified: Oct 07, 2026
Published: Oct 07, 2026
CVE-2026-45161
wger: trainer_login accepts GET - CSRF bypass enables forced session rebinding
Last Modified: Oct 07, 2026
Published: Oct 07, 2026
CVE-2026-43976
wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)
Last Modified: Oct 07, 2026
Published: Oct 07, 2026
Items Per Page
