Uunopim

Products

Exploited and recent CVEs

• CVE-2026-102630 Medium 4.7 UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host 0.1%
• CVE-2026-85395 High 7.1 UnoPim before 2.1.3 Missing Authorization on Integration Management Routes 0.4%
• CVE-2026-82524 High 7.2 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint 0.6%
• CVE-2025-55745 Low 2.5 UnoPim Quick Export feature is vulnerable to CSV injection 0.6%
• CVE-2025-55741 High 8.1 unopim/unopim allows unauthorized product deletion via mass-delete endpoint 0.4%
• CVE-2025-55744 Medium 6.9 UnoPim vulnerable to CSRF on Product edit feature and creation of other types 0.2%
• CVE-2025-55743 High 7.3 UnoPim vulnerable to remote code execution through Arbitrary File upload 0.5%
• CVE-2025-55742 High 8.0 UnoPim Stored XSS via SVG MIME/Sanitizer Bypass 0.4%
• CVE-2024-52305 Medium 6.5 UnoPim Stored XSS : Cookie hijacking through Create User function 0.2%