WebFactory has 4 CVEs on record. 4 were published in the last 90 days. The median CVSS is 5.0 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.0
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Products
- advanced-google-recaptcha 1
- captcha-code-authentication 1
- email-log 1
- login-lockdown 1
4
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-94174High· 7.6Administrator SQL Injection in Email Log <= 2.63 versions.42CVE-2026-100518Medium· 5.3Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.29CVE-2026-97308Medium· 4.8Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions.26CVE-2026-94457Medium· 4.8Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions.26
WebFactory vulnerabilities
CVEs affecting WebFactory, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-97308Medium· 4.8Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions.
Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions.
▾ SunlitWebFactory · login-lockdownEPSS 0.18%via NVD
CVE-2026-100518Medium· 5.3Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.
Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.
▾ SunlitWebFactory · advanced-google-recaptchaEPSS 0.26%via NVD
CVE-2026-94174High· 7.6Administrator SQL Injection in Email Log <= 2.63 versions.
Administrator SQL Injection in Email Log <= 2.63 versions.
▾ TwilightWebFactory · email-logEPSS 0.38%via NVD
CVE-2026-94457Medium· 4.8Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions.
Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions.
▾ SunlitWebFactory · captcha-code-authenticationEPSS 0.24%via NVD