https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:05:08.662490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66204 CVE-2025-66204 — WBCE CMS allows brute-force protection bypass using X-Forwarded-For header 2026-10-08T11:05:08.678610+00:00

Affected: WBCE_CMS

WBCE CMS is a content management system. Version 1.6.4 contains a brute-force protection bypass where an attacker can indefinitely reset the counter by modifying `X-Forwarded-For` on each request, gaining unlimited password guessing attempts, effectively bypassing all brute-force protection. The application fully trusts the `X-Forwarded-For` header without validating it or restricting its usage. This issue is fixed in version 1.6.5.