Search results

NewStatPress Plugin for WordPress /wp-admin/admin.php nsp_search Page where1 Parameter XSS

Status: Open.

#82 In attritionorg/potential-0days;

· attritionorg opened on Feb 19, 2026

GET /cgi-bin/ax.cgi URI Open Redirect Weakness

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#81 In attritionorg/potential-0days;

· attritionorg opened on Feb 18, 2026

GET / XVpk Parameter SQL Injection

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#80 In attritionorg/potential-0days;

· attritionorg opened on Feb 3, 2026

GET /cgi-bin/ URI Parameter Handling Remote Command Execution [Rondodox]

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#79 In attritionorg/potential-0days;

· attritionorg opened on Feb 3, 2026

GET /response-headers server Parameter XSS

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#78 In attritionorg/potential-0days;

· attritionorg opened on Jan 29, 2026

GET / itwed Parameter XSS

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#77 In attritionorg/potential-0days;

· attritionorg opened on Jan 29, 2026

GET /htdocs/index.php/cmd.php dn Parameter XSS

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#76 In attritionorg/potential-0days;

· attritionorg opened on Jan 29, 2026

GET / User-agent Handling Remote Command Execution [Rondodox]

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#74 In attritionorg/potential-0days;

· attritionorg opened on Jan 21, 2026

YesWiki /?PagePrincipale/rss id Parameter XSS

KEVKnown Exploited Vulnerability (KEV) / Exploited in the Wild (EitW)Known Exploited Vulnerability (KEV) / Exploited in the Wild (EitW)

Vendor ContactedVendor ContactedVendor Contacted

Status: Open.

#73 In attritionorg/potential-0days;

· attritionorg opened on Jan 8, 2026

GET /properties-list.php code Parameter XSS

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#71 In attritionorg/potential-0days;

· attritionorg opened on Jan 8, 2026

GET /ping.cgi pingIpAddress Parameter Remote Command Execution

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#70 In attritionorg/potential-0days;

· attritionorg opened on Jan 8, 2026

GET /log/view Multiple Parameter Path Traversal Remote File Disclosure

Need More InfoFurther information is requestedFurther information is requested

Status: Open.

#69 In attritionorg/potential-0days;

· attritionorg opened on Jan 7, 2026