Read the docs

macrozheng

Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

macrozheng records in CISA KEV

No macrozheng vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

16 records in Mall · all components

Priority HIGH 81

macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a v…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00706 Published 2026-02-07 No fix listed CWE-640
Priority MEDIUM 61

A vulnerability was found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00419 Published 2025-08-08 No fix listed CWE-310
TI-2025-12290 CVE-2025-13443 · GHSA-qwp5-2j5x-f2qf

macrozheng mall delete access control

Priority MEDIUM 57

A vulnerability was detected in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00252 Published 2025-11-20 No fix listed CWE-266
TI-2025-09023 CVE-2025-9836 · GHSA-m5q3-x5vg-97f9

macrozheng mall paySuccess authorization

Priority MEDIUM 57

A vulnerability was found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00311 Published 2025-09-02 No fix listed CWE-285
TI-2025-08719 CVE-2025-9514 · GHSA-3mmp-v5fp-4vcm

macrozheng mall Registration weak password

Priority LOW 28

A vulnerability has been found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00408 Published 2025-08-27 No fix listed CWE-521
TI-2024-10766 CVE-2024-11619 · GHSA-6cjp-89m2-82w2

macrozheng mall JWT Token default key

Priority LOW 13

A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3.

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00733 Published 2024-11-22 No fix listed CWE-1394
Open these records in search →