Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Labs64 Clear all filters
TI-2026-74648 CVE-2026-57496 · GHSA-hxpf-9xvq-wph8

Path traversal in NetLicensing MCP Server exposes plaintext tokens

Priority HIGH 76

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00435 Published 2026-10-15 Fixed in 0.1.8 CWE-22
TI-2024-36379 CVE-2024-54291 · GHSA-fmgc-85r6-v6q3

WordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerability

Priority MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 PluginPass pluginpass-pro-plugintheme-licensing allows Manipulating Web Input to File System Calls.This issue affects…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0056 Published 2025-03-28 No fix listed CWE-22
TI-2024-35049 CVE-2024-52378 · GHSA-v54f-4grx-9p5c

WordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 DigiPass digipass allows Absolute Path Traversal.This issue affects DigiPass: from n/a through <= 0.3.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00558 Published 2024-11-14 No fix listed CWE-22