akirk

Products

ProductCVEsExploitedLatest
Friends3–Jul 12, 2025

Exploited and recent CVEs

  • CVE-2025-7504 High 7.5 Friends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection 0.8%
  • CVE-2024-12028 Medium 5.3 Friends <= 3.2.1 - Missing Authorization 0.4%
  • CVE-2024-1978 Medium 5.5 Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery 0.5%