Namelessmc Nameless vulnerabilities

• namelessmc nameless NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization CVE-2026-40571 5.3 MediumJune 2, 2026
• namelessmc nameless NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes CVE-2026-35447 5.3 MediumJune 2, 2026
• namelessmc nameless NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization CVE-2026-40314 6.9 MediumJune 2, 2026
• namelessmc nameless NamelessMC: Forum reactions bypass the "view own topics only" restriction CVE-2026-35443 5.3 MediumJune 2, 2026
• namelessmc nameless NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swapping CVE-2026-34460 5.4 MediumJune 2, 2026
• namelessmc nameless Authenticated users can read hidden forum posts through `/forum/get_quotes` CVE-2026-33398 7.1 HighJune 2, 2026
• namelessmc nameless NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/ CVE-2026-32250 4.3 MediumJune 2, 2026
• namelessmc nameless NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor CVE-2025-54117 9.1 CriticalAugust 18, 2025
• namelessmc nameless NamelessMC allows Stored Cross Site Scripting (XSS) in SEO component CVE-2025-54421 7.2 HighAugust 18, 2025
• namelessmc nameless NamelessMC allows sensitive information disclosure in member list component CVE-2025-54118 5.3 MediumAugust 18, 2025
• namelessmc nameless NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pages CVE-2025-32389 8.6 HighApril 18, 2025
• namelessmc nameless NamelessMC Vulnerable to Cookie-Based View Count Manipulation CVE-2025-31120 5.3 MediumApril 18, 2025
• namelessmc nameless NamelessMC Has Forum Reply Submission Time Limit Bypass CVE-2025-31118 7.1 HighApril 18, 2025
• namelessmc nameless NamelessMC Forum Topic Deletion Triggered by Unrelated User Deletion CVE-2025-30357 7.3 HighApril 18, 2025
• namelessmc nameless NamelessMC Forum iframe width/height abuse causing UI-based Denial of Service CVE-2025-30158 7.1 HighApril 18, 2025
• namelessmc nameless NamelessMC Has Lack of Length Validation for s Parameter in GET Requests CVE-2025-29784 7.5 HighApril 18, 2025
• namelessmc nameless Cross-site Scripting in NamelessMC CVE-2025-22142 6.3 MediumJanuary 13, 2025
• namelessmc nameless Account Takeover in NamelessMC CVE-2025-22144 9.0 CriticalJanuary 13, 2025
• namelessmc nameless, namelessmc/nameless +1 more Session Fixation in namelessmc/nameless CVE-2022-2820 7.0 HighAugust 15, 2022
• namelessmc nameless, namelessmc/nameless +1 more Missing Critical Step in Authentication in namelessmc/nameless CVE-2022-2821 9.8 CriticalAugust 15, 2022