midoks
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| mdserver-web | 1 | – | May 14, 2026 |
| WP微信机器人 | 1 | – | Dec 16, 2024 |
Exploited and recent CVEs
- CVE-2026-41315 mdserver-web: Missing Authorization and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 1.0%
- CVE-2024-54392 WordPress WP微信机器人 plugin <= 5.3.5 - CSRF to Stored XSS vulnerability 0.2%