danielbrendel

Products

ProductCVEsExploitedLatest
hortusfox-web4–Oct 9, 2026

Exploited and recent CVEs

  • CVE-2026-108101 High 7.5 HortusFox through 6.3 Unrestricted File Upload via Plant Attachments 0.5%
  • CVE-2026-108100 Medium 6.5 HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter 0.3%
  • CVE-2026-104069 High 7.2 HortusFox < 6.2 Remote Code Execution via Theme Import 0.5%
  • CVE-2026-92980 High 7.2 HortusFox-Web < 6.1 Remote Code Execution via Import/Export 1.0%