Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

WonderCMS/wondercms

              main @ 7dae4c9
            

Fixes

CVEs

HIGH

Peak severity

100.0%

Coverage

Highlights

Path Traversal: 8 prior fixes. Scrutinize any change in this area.

index.php: most-fixed (13 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Multiple fixes address arbitrary file writes/deletes/inclusion via user-controlled paths in module install, delete, and page operations; high severity due to RCE/file overwrite potential.

Path Traversal: User-controlled 'hook' parameter in include() allowed arbitrary file inclusion; fixed with plugin whitelist but highlights a separate entry point for the same class.

SSRF: External URL fetching for module updates lacked domain verification, enabling SSRF; fixed by restricting to GitHub/GitLab domains.