Log in Start free

NamelessMC

Products

ProductCVEsExploitedLatest
Nameless18–Jun 2, 2026
namelessmc/nameless2–Aug 15, 2022

Exploited and recent CVEs

  • CVE-2026-40571 Medium 5.3 NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization 0.2%
  • CVE-2026-35447 Medium 5.3 NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes 0.2%
  • CVE-2026-40314 Medium 6.9 NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization 0.3%
  • CVE-2026-35443 Medium 5.3 NamelessMC: Forum reactions bypass the "view own topics only" restriction 0.2%
  • CVE-2026-34460 Medium 5.4 NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swapping 0.1%
  • CVE-2026-33398 High 7.1 Authenticated users can read hidden forum posts through `/forum/get_quotes` 0.2%
  • CVE-2026-32250 Medium 4.3 NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/ 0.2%
  • CVE-2025-54117 Critical 9.1 NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor 0.4%
  • CVE-2025-54421 High 7.2 NamelessMC allows Stored Cross Site Scripting (XSS) in SEO component 0.4%
  • CVE-2025-54118 Medium 5.3 NamelessMC allows sensitive information disclosure in member list component 0.4%
  • CVE-2025-32389 High 8.6 NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pages 0.5%
  • CVE-2025-31120 Medium 5.3 NamelessMC Vulnerable to Cookie-Based View Count Manipulation 0.5%
  • CVE-2025-31118 High 7.1 NamelessMC Has Forum Reply Submission Time Limit Bypass 0.6%
  • CVE-2025-30357 High 7.3 NamelessMC Forum Topic Deletion Triggered by Unrelated User Deletion 0.5%
  • CVE-2025-30158 High 7.1 NamelessMC Forum iframe width/height abuse causing UI-based Denial of Service 0.6%
  • CVE-2025-29784 High 7.5 NamelessMC Has Lack of Length Validation for s Parameter in GET Requests 0.7%
  • CVE-2025-22142 Medium 6.3 Cross-site Scripting in NamelessMC 0.3%
  • CVE-2025-22144 Critical 9.0 Account Takeover in NamelessMC 0.8%
  • CVE-2022-2820 High 7.0 Session Fixation in namelessmc/nameless 0.7%
  • CVE-2022-2821 Critical 9.8 Missing Critical Step in Authentication in namelessmc/nameless 1.4%