NamelessMC

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

NamelessMC records in CISA KEV

No NamelessMC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nameless 13 records HIGH

Records

20 records

TI-2025-16092 CVE-2025-22144

Account Takeover in NamelessMC

HIGH 78

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 4.0CRITICAL 9.0 Network No auth No interaction EPSS 0.00778 Published 2025-01-13 No fix listed CWE-610

TI-2025-33960 CVE-2025-54117

NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor

HIGH 72

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.00386 Published 2025-08-18 Fixed in 2.2.4 CWE-79

TI-2025-23467 CVE-2025-32389

NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pages

HIGH 72

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.0051 Published 2025-04-18 Fixed in 2.1.4 CWE-89

TI-2025-21195 CVE-2025-29784

NamelessMC Has Lack of Length Validation for s Parameter in GET Requests

HIGH 72

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00657 Published 2025-04-18 Fixed in 2.2.0 CWE-1284

TI-2026-29091 CVE-2026-40314

NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization

HIGH 70

NamelessMC is website software for Minecraft servers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00272 Published 2026-06-02 No fix listed CWE-862

TI-2022-02614 CVE-2022-2820 · GHSA-mc87-mp22-885h

Session Fixation in namelessmc/nameless

HIGH 69

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00735 Published 2022-08-15 Fixed in v2.0.2 CWE-384

TI-2025-16090 CVE-2025-22142

Cross-site Scripting in NamelessMC

HIGH 67

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00288 Published 2025-01-13 No fix listed CWE-79

TI-2025-34226 CVE-2025-54421

NamelessMC allows Stored Cross Site Scripting (XSS) in SEO component

HIGH 65

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00393 Published 2025-08-18 Fixed in 2.2.4 CWE-79

TI-2025-22379 CVE-2025-31118

NamelessMC Has Forum Reply Submission Time Limit Bypass

MEDIUM 64

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00557 Published 2025-04-18 Fixed in 2.2.0 CWE-400

TI-2025-21497 CVE-2025-30158

NamelessMC Forum iframe width/height abuse causing UI-based Denial of Service

MEDIUM 64

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00557 Published 2025-04-18 Fixed in 2.2.0 CWE-400

TI-2026-27578 CVE-2026-35447

NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests…

MEDIUM 63

NamelessMC is website software for Minecraft servers.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00236 Published 2026-06-02 No fix listed CWE-201

TI-2025-22381 CVE-2025-31120

NamelessMC Vulnerable to Cookie-Based View Count Manipulation

MEDIUM 63

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00478 Published 2025-04-18 Fixed in 2.2.0 CWE-565

TI-2026-26725 CVE-2026-34460

NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swapping

MEDIUM 58

NamelessMC is website software for Minecraft servers.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00114 Published 2026-06-02 Fixed in 2.2.5 CWE-302

TI-2026-29312 CVE-2026-40571

NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization

MEDIUM 57

NamelessMC is website software for Minecraft servers.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00235 Published 2026-06-02 No fix listed CWE-862

TI-2026-27574 CVE-2026-35443

NamelessMC: Forum reactions bypass the "view own topics only" restriction

MEDIUM 57

NamelessMC is website software for Minecraft servers.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00235 Published 2026-06-02 No fix listed CWE-862

TI-2025-33961 CVE-2025-54118

NamelessMC allows sensitive information disclosure in member list component

MEDIUM 57

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00428 Published 2025-08-18 Fixed in 2.2.4 CWE-200

TI-2026-24779 CVE-2026-32250

NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/

MEDIUM 53

NamelessMC is website software for Minecraft servers.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00185 Published 2026-06-02 No fix listed CWE-79

TI-2022-02615 CVE-2022-2821 · GHSA-xjp5-5ph6-c66c

Missing Critical Step in Authentication in namelessmc/nameless

LOW 36

Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01416 Published 2022-08-15 Fixed in v2.0.2 CWE-304

TI-2025-21663 CVE-2025-30357

NamelessMC Forum Topic Deletion Triggered by Unrelated User Deletion

LOW 34

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.3 Network High privileges User interaction EPSS 0.00463 Published 2025-04-18 Fixed in 2.2.0 CWE-706

TI-2026-25795 CVE-2026-33398

Authenticated users can read hidden forum posts through `/forum/get_quotes`

LOW 31

NamelessMC is website software for Minecraft servers.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00225 Published 2026-06-02 No fix listed CWE-285

Open these records in search →