thoefter

Products

ProductCVEsExploitedLatest
CMS Commander – Manage Multiple Sites2–Mar 21, 2026

Exploited and recent CVEs

  • CVE-2026-3334 High 8.8 CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter 0.4%
  • CVE-2023-3325 High 8.1 CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature 0.5%