murtaza-nasir

Products

ProductCVEsExploitedLatest
speakr2–Sep 17, 2026

Exploited and recent CVEs

  • CVE-2026-54510 High 7.1 Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook 0.2%
  • CVE-2026-45307 Medium 6.1 Speakr: Open redirect in is_safe_url via parser mismatch on next parameter 0.2%