Product by Wing FTP Server

    Wing FTP Server

    20 known vulnerabilities in Wing FTP Server (Wing FTP Server), 2 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wing FTP Server (Wing FTP Server)
    CriticalCVE-2025-47812

    Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

    In CISA KEV

    		10.0
    CriticalCVE-2025-47813

    Wing FTP Server Information Disclosure Vulnerability

    In CISA KEV

    		4.3
    HighCVE-2026-44403

    Wing FTP Server < 8.1.3 Authenticated Remote Code Execution via Session Serialization

    also in 1 other product

    		7.2
    MediumCVE-2025-47811

    Wftpserver Wing FTP Server: Privilege Defined With Unsafe Actions

    		4.1
    MediumCVE-2020-27735

    Wing FTP Server: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2020-37032

    Wing FTP Server 6.3.8 - Remote Code Execution

    also in 1 other product

    		8.8
    HighCVE-2025-5196

    Wing FTP Server Lua Admin Console unnecessary privileges

    		6.6
    HighCVE-2020-8635

    Wing FTP Server: Privilege Escalation

    		7.8
    HighCVE-2019-25267

    Wing FTP Server 6.0.7 - Unquoted Service Path

    		7.8
    HighCVE-2020-9470

    Wing FTP Server: security vulnerability

    		7.8
    Not ratedCVE-2015-4108

    Wing FTP Server: Cross-Site Request Forgery (CSRF)

    		—
    Not ratedCVE-2012-4729

    Wing FTP Server: Denial of Service

    		—
    Not ratedCVE-2010-2428

    Wing FTP Server: Cross-Site Scripting (XSS)

    		—
    HighCVE-2023-37879

    Exposed Session Variable in Wing FTP Server <= 7.2.0

    also in 1 other product

    		6.5
    HighCVE-2020-8634

    Wing FTP Server: Privilege Escalation

    		7.8
    HighCVE-2023-37878

    Insecure Default Permissions in Wing FTP Server <= 7.2.0

    also in 1 other product

    		6.1
    HighCVE-2023-37881

    Weak Access Control between Domains in Wing FTP Server <= 7.2.0

    also in 1 other product

    		4.9
    HighCVE-2025-27889

    Wftpserver Wing FTP Server: External Control of System or Configuration Setting

    		3.4
    MediumCVE-2020-37079

    Wing FTP Server < 6.2.7 - Cross-site Request Forgery

    also in 1 other product

    		4.3
    MediumCVE-2023-37875

    Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0

    also in 1 other product

    		3.0

    All products by Wing FTP Server