Flow
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Flow Payment | 1 | – | Jul 18, 2026 |
| flow-server | 1 | – | Jun 22, 2023 |
Exploited and recent CVEs
- CVE-2026-57857 Flow Payment Plugin for WordPress Reflected Cross-Site Scripting via error_message Parameter 0.3%
- CVE-2023-25500 Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0.rc2, resulting in potential information 0.5%