mirceatm
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| NMR Strava activities | 2 | – | May 8, 2026 |
Exploited and recent CVEs
- CVE-2026-5341 NMR Strava activities <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
- CVE-2024-51603 WordPress NMR Strava activities plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability 0.3%