CVE-2025-55849: Weiphp

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee

Affected products

• Weiphp Weiphp: up to and including 5.0

Published 2025-09-08. Last modified 2026-07-05.