CVE-2022-26254

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p56

Published

Mar 27, 2022 (Mar 27, 2022)

Modified

Jun 17, 2026

Description

WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names.

Vendors: wowonder
Products: wowonder
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.