Cwicly vulnerabilities

Products

• Cwicly 2

Latest Cwicly CVEs

Newest publication first

1. CVE-2026-32444 WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability

   Published 2026-08-18

   Critical·CVSS 9.9 EPSS 0.79%

   Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.

2. CVE-2024-24707 WordPress Cwicly plugin <= 1.4.0.2 - Auth. Remote Code Execution (RCE) vulnerability

   Published 2024-04-03

   Critical·CVSS 9.9 EPSS 0.75%

   Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Injection.This issue affects Cwicly: from n/a through 1.4.0.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.