How many wukongopensource WukongCRM CVEs are in CISA KEV?

None of wukongopensource WukongCRM's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wukongopensource WukongCRM are affected?

7 distinct wukongopensource WukongCRM versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wukongopensource WukongCRM CVEs?

wukongopensource WukongCRM's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-209 (Generation of Error Message Containing Sensitive Information), CWE-285 (Improper Authorization), CWE-502 (Deserialization of Untrusted Data).

How many critical wukongopensource WukongCRM vulnerabilities are there?

wukongopensource WukongCRM has 1 critical and 0 high-severity CVEs.

What is the average severity of wukongopensource WukongCRM CVEs?

The average CVSS base score across wukongopensource WukongCRM's scored CVEs is 6.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wukongopensource

6 CVEs

wukongopensource WukongCRM Vulnerabilities

Name: wukongopensource WukongCRM vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WukongCRM by wukongopensource.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

6

Public exploits

PoC or exploit code

6.0

Avg CVSS

2024–2026

Last updated February 8, 2026

Overview

wukongopensource WukongCRM has 6 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wukongopensource WukongCRM, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wukongopensource WukongCRM's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wukongopensource WukongCRM's CVEs are currently listed in CISA's KEV catalog.

Public exploits

6

6 of wukongopensource WukongCRM's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every wukongopensource WukongCRM version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

11.3.01 CVE
11.3.11 CVE
11.3.21 CVE
11.3.31 CVE

Version ranges

>= 9.03 CVEs
>= .72crm_9.0.1_201912021 CVE
>= 11.01 CVE

Find a version

6 CVEs

Sort

WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization
CVE-2026-2141
Public exploit
CWE-285
Medium · CVSS 5.3
EPSS 0.4% (29th pct)2026-02-08
WuKongOpenSource WukongCRM API Response upload information exposure
CVE-2025-8852
Public exploit
CWE-209
Medium · CVSS 5.3
EPSS 0.4% (28th pct)2025-08-11
WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery
CVE-2025-6106
Public exploit
CWE-352
Medium · CVSS 5.3
EPSS 0.2% (15th pct)2025-06-16
WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting
CVE-2025-5879
Public exploit
CWE-79
Medium · CVSS 5.1
EPSS 0.2% (16th pct)2025-06-09
WuKongOpenSource WukongCRM updataPassword cross-site request forgery
CVE-2025-5521
Public exploit
CWE-352
Medium · CVSS 5.3
EPSS 0.3% (19th pct)2025-06-03
Critical vulnerability · 2024-02-01
CVE-2024-23052
Public exploit
CWE-502
Critical · CVSS 9.8
EPSS 4.9% (91th pct)2024-02-01

Common weakness types

The CWE weakness categories most often found in wukongopensource WukongCRM CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many wukongopensource WukongCRM CVEs were published each year.

2024

1

2025

4

2026

1

Other wukongopensource products

Browse vulnerabilities for other products by wukongopensource.

wukongcrm-11.0-web-java2 CVEs WukongCRM 11.01 CVEs wukongcrm-9.0-java1 CVEs wukong_nocode1 CVEs

All wukongopensource vulnerabilities

Frequently asked questions

Common questions about wukongopensource WukongCRM vulnerabilities.

How many CVEs does wukongopensource WukongCRM have?: wukongopensource WukongCRM has 6 published CVE records since 2024.
How many wukongopensource WukongCRM CVEs are in CISA KEV?: None of wukongopensource WukongCRM's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wukongopensource WukongCRM vulnerabilities?: Yes — 6 of wukongopensource WukongCRM's CVEs have a known public exploit.
Which versions of wukongopensource WukongCRM are affected?: 7 distinct wukongopensource WukongCRM versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wukongopensource WukongCRM CVEs?: wukongopensource WukongCRM's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-209 (Generation of Error Message Containing Sensitive Information), CWE-285 (Improper Authorization), CWE-502 (Deserialization of Untrusted Data).
How many critical wukongopensource WukongCRM vulnerabilities are there?: wukongopensource WukongCRM has 1 critical and 0 high-severity CVEs.
What is the average severity of wukongopensource WukongCRM CVEs?: The average CVSS base score across wukongopensource WukongCRM's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wukongopensource WukongCRM vulnerabilities

Monitor new wukongopensource WukongCRM vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing