Log in Start free

Labs64

Products

ProductCVEsExploitedLatest
NetLicensing-MCP2–Oct 15, 2026
Credit Tracker1–Dec 14, 2023
DigiPass1–Nov 14, 2024
PluginPass1–Mar 28, 2025

Exploited and recent CVEs

  • CVE-2026-57496 Critical 9.6 NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction 0.4%
  • CVE-2026-54446 High 8.1 NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode 0.6%
  • CVE-2024-54291 High 8.6 WordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerability 0.6%
  • CVE-2024-52378 High 7.5 WordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability 0.6%
  • CVE-2023-49152 Medium 6.5 WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS) 0.4%