Wondershare vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2020-37254 Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service.High 8.5 · Jun 19, 2026
• CVE-2019-25344 Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory.High 8.5 · Feb 12, 2026
• CVE-2019-25266 Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitraryHigh 8.5 · Feb 6, 2026
• CVE-2020-36977 Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentiallyHigh 8.5 · Jan 27, 2026
• CVE-2022-50904 Wondershare UBackit 2.0.5 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system priHigh 8.5 · Jan 13, 2026
• CVE-2022-50903 Wondershare MobileTrans 3.5.9 contains an unquoted service path vulnerability in the ElevationService that allows local users to potentially execute code with eHigh 8.5 · Jan 13, 2026
• CVE-2022-50902 Wondershare FamiSafe 1.0 contains an unquoted service path vulnerability in the FSService that allows local users to potentially execute code with elevated privHigh 8.5 · Jan 13, 2026
• CVE-2022-50901 Wondershare Dr.Fone 11.4.9 contains an unquoted service path vulnerability in the DFWSIDService that allows local users to potentially execute arbitrary code.High 8.5 · Jan 13, 2026
• CVE-2022-50900 Wondershare Dr.Fone 12.0.18 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges.High 8.5 · Jan 13, 2026
• CVE-2022-50690 Wondershare MirrorGo 2.0.11.346 contains a local privilege escalation vulnerability due to incorrect file permissions on executable files.High 8.5 · Dec 22, 2025
• CVE-2025-10644 Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability.Critical 9.4 · Sep 17, 2025
• CVE-2025-10643 Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability.Critical 9.1 · Sep 17, 2025
• CVE-2025-5180 A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16.High 7.3 · May 26, 2025
• CVE-2020-23438 Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.High 7.8 · Mar 4, 2025
• CVE-2025-0834 Privilege escalation vulnerability has been found in Wondershare Dr.Fone version 13.5.21.High 7.8 · Jan 30, 2025
• CVE-2024-26574 Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushSeHigh 7.8 · Apr 8, 2024
• CVE-2023-31748 Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file.High 7.8 · May 24, 2023
• CVE-2023-31747 Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService.High 7.8 · May 23, 2023
• CVE-2023-29835 Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function.High 7.8 · Apr 26, 2023
• CVE-2023-27771 An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCC_setup_fulHigh 7.8 · Apr 4, 2023
• CVE-2023-27770 An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-max_setup_full5371.exe High 7.8 · Apr 4, 2023
• CVE-2023-27769 An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the pdfreader_setup_full13143.exeHigh 7.8 · Apr 4, 2023
• CVE-2023-27768 An issue found in Wondershare Technology Co.,Ltd PDFelement v9.1.1 allows a remote attacker to execute arbitrary commands via the pdfelement-pro_setup_full5239.High 7.8 · Apr 4, 2023
• CVE-2023-27767 An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file.High 7.8 · Apr 4, 2023
• CVE-2023-27766 An issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to execute arbitrary commands via the anireel_setup_full9589.exe file.High 7.8 · Apr 4, 2023