Skip to content
Ppravel
Exploited and recent CVEs
-
CVE-2026-12415
Critical 9.8
Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter
0.8%
-
CVE-2026-12416
Critical 9.8
Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter
0.7%
-
CVE-2026-12417
Critical 9.8
SignUp & SignIn <= 1.0.0 - Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover
0.8%