Vulnerabilities
CVE-2025-67504 - WBCE CMS Cryptographically Insecure Password Generation Vulnerability
CVE ID : CVE-2025-67504 Published : Dec. 9, 2025, 4:20 a.m. | 2 hours, 1 minute ago Description : WBCE CMS is a content management system. Versions 1.6.4 and below use function GenerateRandomPassword() to create passwords using PHP's rand(). rand() is not cryptographically secure, which allows password sequences to be predicted or brute-forced. This can lead to user account compromise or privilege escalation if these passwords are used for new accounts or password resets. The vulnerability is fixed in version 1.6.5. Severity: 9.1 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Affected Product:
PHP
Impact:
privilege escalation
Source: Telegram CVE Monitor