skatox

Products

ProductCVEsExploitedLatest
JS Archive List2–Mar 7, 2026

Exploited and recent CVEs

  • CVE-2026-2020 High 7.5 JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute 0.5%
  • CVE-2025-7670 High 7.5 JS Archive List <= 6.1.5 - Unauthenticated SQL Injection via build_sql_where Function 0.5%