wondershare has 4 CVEs on record between 2022 and 2025. The median CVSS is 9.3 (critical), with 3 rated critical. Most affected products: dr.fone (2), repairit (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-10644Critical· 9.4Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability77CVE-2025-10643Critical· 9.1Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability76CVE-2021-44596Critical· 9.8Wondershare LTD Dr70CVE-2021-44595High· 8.8Wondershare Dr65
wondershare vulnerabilities
CVEs affecting wondershare, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2025-10644Critical· 9.40dayWondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability
Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit th…
CVE-2025-10643Critical· 9.10dayWondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability
Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not requir…
CVE-2021-44596Critical· 9.8PoCWondershare LTD Dr
Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running unde…
CVE-2021-44595High· 8.8PoCWondershare Dr
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM pri…