Advisories · Technology

wppconnect-server.

Every CVE that names wppconnect-server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-123197 CVE record

CVSS 6.9 Medium

WPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /files
- wppconnect-server
- Information disclosure
Not analysed yet 5 Nov 2026
CVE-2026-121557 CVE record

CVSS 8.2 High

WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot
- wppconnect-server
- Authentication bypass
Not analysed yet 3 Nov 2026