bandido vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20254
3. 20261

Newest CVEs

• CVE-2026-2292

  Morkva UA Shipping <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Weight, kg' Field

  bandido · Morkva UA Shipping

  Medium4.4
• CVE-2025-12170

  Checkbox <= 2.8.10 - Missing Authorization to Unauthenticated Log Clearing

  bandido · Checkbox

  Medium5.3
• CVE-2025-6720

  Vchasno Kasa <= 1.0.3 - Unauthenticated Log File Clearing

  bandido · MORKVA Vchasno Kasa Integration

  Medium5.3
• CVE-2025-6721

  Vchasno Kasa <= 1.0.3 - Missing Authorization to Unauthenticated Invoice Generation

  bandido · MORKVA Vchasno Kasa Integration

  Medium5.3
• CVE-2024-12049

  Woo Ukrposhta <= 1.17.11 - Reflected Cross-Site Scripting via order, post, and idd Parameters

  bandido · Ukrposhta

  Medium6.1
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3