Security Box Score — Saturday, May 23, 2026

41 CVEs published May 23, 2026: 2 critical, 23 high, 3 medium, 13 low; 0 in KEV; 1 with a public exploit reference; 0 awaiting enrichment. 25 rendered as box scores below; the remaining 16 in the results table.

League
	MTD	YTD	2025 same span	2025 full
CVEs published	1108	2238	1010	2563
KEV catalog size	1670

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	226	552	67	448	36	0	27	2	0.4	7.8	.0014	+129
microsoft	164	484	43	325	99	0	378	27	5.6	7.8	.0045	-21
apple	13	40	0	10	22	1	93	7	17.5	6.2	.0037	+13
red hat	9	32	5	17	8	2	4	0	0.0	7.5	.0041	-2
google	16	22	0	13	6	0	74	4	18.2	8.4	.0035	+15
freebsd	7	7	0	5	2	0	0	0	0.0	7.8	.0020	+7
suse	2	2	0	2	0	0	0	0	0.0	8.2	.0020	+2
android	0	0	0	0	0	0	15	0	—	—	—	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	5	13	3	1	2	96	8	61.5	8.6	.1247	+2
fortinet	1	6	1	3	0	28	3	50.0	7.9	.4330	-2
ivanti	2	5	0	1	0	33	4	80.0	8.8	.8056	+1
f5	2	3	2	0	0	7	1	33.3	9.2	.0996	+2
ubiquiti	2	3	1	2	0	4	0	0.0	8.8	.0068	+2
broadcom	0	2	0	0	0	4	2	100.0	—	.1990	0
palo alto networks	1	1	0	0	0	14	1	100.0	—	.3207	+1
citrix	0	1	0	0	0	19	1	100.0	—	.8447	0

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	9	20	4	12	4	40	1	5.0	7.5	.0090	+6
mozilla	5	5	3	2	0	13	0	0.0	9.6	.0045	+5
docker	3	3	0	3	0	1	0	0.0	8.8	.0022	+3
drupal	3	3	1	0	2	5	1	33.3	5.1	.0021	+3
gitlab	0	2	0	0	0	4	2	100.0	—	.4451	0
jenkins	0	0	0	0	0	6	0	—	—	—	0
joomla	0	0	0	0	0	1	0	—	—	—	0
wordpress	0	0	0	0	0	5	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
progress	4	4	0	4	9	0	0.0	7.5	.0036	+4
adobe	1	4	0	1	75	3	75.0	8.6	.2776	-2
solarwinds	0	3	1	0	11	3	100.0	9.8	.8362	0
oracle	0	2	0	2	40	0	0.0	7.5	.0065	0
zohocorp	1	1	0	1	0	0	0.0	8.4	.0170	+1
atlassian	0	0	0	0	13	0	—	—	—	0
ibm	0	0	0	0	7	0	—	—	—	0
sap	0	0	0	0	12	0	—	—	—	0

Industrial & Embedded
Vendor	MTD	YTD	H	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
d-link	1	2	1	26	1	50.0	8.7	.4511	+1
siemens	1	1	1	1	0	0.0	8.7	.0032	+1
hikvision	0	1	0	2	1	100.0	—	1.0000	0
dahua	0	0	0	2	0	—	—	—	0
qnap	0	0	0	8	0	—	—	—	0
schneider electric	0	0	0	1	0	—	—	—	0
tp-link	0	0	0	6	0	—	—	—	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
concrete cms	44	44	1	9	13	21	0	0	0.0	5.7	.0015	+44
open ises	37	37	2	14	21	0	0	0	0.0	6.9	.0021	+37
netatalk	33	33	1	13	9	10	0	0	0.0	6.4	.0030	+33
grafana	10	27	2	7	16	2	0	0	0.0	6.5	.0033	+7
dell	12	18	0	6	11	0	2	1	5.6	6.7	.0019	+7
nvidia	16	16	7	9	0	0	0	0	0.0	8.4	.0059	+16
trend micro	16	16	2	13	1	0	12	1	6.3	7.8	.0030	+16
givanz	11	15	2	7	6	0	0	0	0.0	8.3	.0028	+7

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-31431	.9991	100.0	7.8
CVE-2008-4250	.9875	99.9	—
CVE-2026-41940	.9793	99.9	9.3
CVE-2026-43284	.9324	99.8	8.8
CVE-2026-43500	.9285	99.8	7.8
CVE-2024-7399	.9194	99.8	—
CVE-2010-0249	.9188	99.8	—
CVE-2026-20182	.9152	99.8	—
CVE-2025-29635	.8964	99.8	—
CVE-2026-42208	.8942	99.8	—

Highest CVSS
CVE	CVSS	EPSS
CVE-2026-43997	10.0	.0098
CVE-2026-42826	10.0	.0084
CVE-2026-20223	10.0	.0083
CVE-2026-44005	10.0	.0083
CVE-2026-44006	10.0	.0081
CVE-2026-46595	10.0	.0050
CVE-2026-42822	10.0	.0049
CVE-2026-33712	10.0	.0035
CVE-2026-9152	10.0	.0034
CVE-2026-42901	10.0	.0030

Most disclosures (vendor)
Vendor	CVEs
linux	294
microsoft	166
concrete cms	44
open ises	37
netatalk	33
google	16
nvidia	16
trend micro	16
apache	15
apple	13

Most KEV additions (YTD)
Vendor	KEV
microsoft	27
cisco	8
apple	7
google	4
ivanti	4
synacor	4
adobe	3
fortinet	3
smartertools	3
solarwinds	3

Most-affected ecosystems
Ecosystem	Advisories
Maven	4
PyPI	1
npm	1

Fastest to KEV
CVE	Vendor	Days
CVE-2008-4250	Microsoft	0
CVE-2009-1537	Microsoft	0
CVE-2009-3459	Adobe	0
CVE-2010-0249	Microsoft	0
CVE-2010-0806	Microsoft	0
CVE-2024-1708	ConnectWise	0
CVE-2024-57726	n/a	0
CVE-2024-57728	n/a	0
CVE-2024-7399	Samsung	0
CVE-2025-29635	D-Link	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	Accellion	2021-11-17	1648
CVE-2021-27102	Accellion	2021-11-17	1648
CVE-2021-27101	Accellion	2021-11-17	1648
CVE-2021-27103	Accellion	2021-11-17	1648
CVE-2021-21017	Adobe	2021-11-17	1648
CVE-2021-28550	Adobe	2021-11-17	1648
CVE-2021-42013	Apache	2021-11-17	1648
CVE-2021-41773	Apache	2021-11-17	1648
CVE-2021-30858	Apple	2021-11-17	1648
CVE-2021-30860	Apple	2021-11-17	1648

Yesterday's Results

41 CVEs published. 25 box scores, 16 table rows — nothing truncated.

CVE-2026-46300HIGH

Linux Linux — net: skbuff: preserve shared-frag marker during coalescing

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0701   93.6     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    cef401de7be8c4e155c6746bfccf721a4fa5fab9 –  —
  Linux    3.9 –                                       5.10.257

TIMELINE
  May 13  Reserved by CNA
  May 23  Published (CNA: Linux)

CWE-787, CWE-123 · CNA: Linux · 50 references · NVD status: Modified

CVE-2018-25357CRITICAL

Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0170   75.3     —

AFFECTED
  Product           Versions     Fixed
  Dolibarr ERP CRM  unspecified  —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-94 · CNA: VulnCheck · 4 references · NVD status: Analyzed

CVE-2026-9343LOW

Edimax EW-7438RPn webs formWpsStart os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0152   72.4     —

AFFECTED
  Product     Versions  Fixed
  EW-7438RPn  1.0 –     —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-9297LOW

Edimax BR-6428NS POST Request formWlbasic command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0140   70.1     —

AFFECTED
  Product    Versions  Fixed
  BR-6428NS  1.10 –    —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · 4 references · NVD status: Deferred

CVE-2026-9296LOW

Edimax BR-6428NS POST Request formWlanM system command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0116   64.4     —

AFFECTED
  Product    Versions  Fixed
  BR-6428NS  1.10 –    —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · 4 references · NVD status: Deferred

CVE-2018-25358HIGH

D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0059   45.2     —

AFFECTED
  Product  Versions     Fixed
  DIR-601  unspecified  —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-497 · CNA: VulnCheck · 5 references · NVD status: Awaiting Analysis

CVE-2026-9294HIGH

Edimax BR-6428NS POST Request formWanTcpipSetup buffer overflow

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0054   43.0     —

AFFECTED
  Product    Versions  Fixed
  BR-6428NS  1.10 –    —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-119, CWE-120 · CNA: VulDB · 4 references · NVD status: Deferred

CVE-2026-9295HIGH

Edimax BR-6428NS POST Request formWirelessTbl buffer overflow

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0054   43.0     —

AFFECTED
  Product    Versions  Fixed
  BR-6428NS  1.10 –    —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-119, CWE-120 · CNA: VulDB · 4 references · NVD status: Deferred

CVE-2018-25353HIGH

Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0045   37.5     —

AFFECTED
  Product               Versions     Fixed
  Redaxo CMS Mediapool  unspecified  —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-863 · CNA: VulnCheck · 4 references · NVD status: Deferred

CVE-2018-25350CRITICAL

userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0043   36.1     —

AFFECTED
  Product    Versions  Fixed
  userSpice  4.3.24 –  —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-204 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-9284HIGH

WooCommerce PayPal Payments <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  L  N    8.2   .0040   33.3     —

AFFECTED
  Product                      Versions     Fixed
  WooCommerce PayPal Payments  unspecified  —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: Wordfence)

CWE-862 · CNA: Wordfence · 6 references · NVD status: Deferred

CVE-2018-25348HIGH

harmistechnology Ek Rishta — Joomla! Component Ek Rishta 2.10 SQL Injection via user_detail

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0036   28.9     —

AFFECTED
  Product    Versions  Fixed
  Ek Rishta  2.10 –    —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-89 · CNA: VulnCheck · 4 references · NVD status: Deferred

CVE-2018-25351HIGH

harmistechnology EkRishta — Joomla! Component EkRishta 2.10 SQL Injection via username

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0036   28.9     —

AFFECTED
  Product   Versions  Fixed
  EkRishta  2.10 –    —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-89 · CNA: VulnCheck · 4 references · NVD status: Deferred

CVE-2026-43503HIGH

Linux Linux — net: skbuff: propagate shared-frag marker through frag-transfer helpers

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  C  H  H  H    8.8   .0034   26.6     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    cef401de7be8c4e155c6746bfccf721a4fa5fab9 –  —
  Linux    3.9 –                                       5.10.257

TIMELINE
  May 1   Reserved by CNA
  May 23  Published (CNA: Linux)

CWE-664 · CNA: Linux · 41 references · NVD status: Modified

CVE-2018-25340HIGH

Behance Smartshop — Smartshop 1 SQL Injection via category.php

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0033   26.3     —

AFFECTED
  Product    Versions  Fixed
  Smartshop  1.0 –     —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-89 · CNA: VulnCheck · 4 references · NVD status: Deferred

CVE-2018-25341HIGH

Behance Smartshop — Smartshop 1 SQL Injection via product.php id Parameter

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0033   26.3     —

AFFECTED
  Product    Versions  Fixed
  Smartshop  1.0 –     —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-89 · CNA: VulnCheck · 4 references · NVD status: Deferred

CVE-2018-25342HIGH

Behance Smartshop — Smartshop 1 SQL Injection via search.php

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0033   26.3     —

AFFECTED
  Product    Versions  Fixed
  Smartshop  1.0 –     —

TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)

CWE-89 · CNA: VulnCheck · 4 references · NVD status: Deferred

CVE-2026-9306LOW

QuantumNous new-api Midjourney Image Relay Endpoint relay-router.go GetByOnlyMJId authorization

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   L   N   N    2.9   .0029   21.7     —

AFFECTED
  Product  Versions  Fixed
  new-api  0.12.0 –  —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-285, CWE-639 · CNA: VulDB · 4 references · NVD status: Deferred

CVE-2026-6419HIGH

Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0026   17.6     —

AFFECTED
  Product          Versions     Fixed
  Wishlist Member  unspecified  —

TIMELINE
  Apr 16  Reserved by CNA
  May 23  Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · 2 references · NVD status: Deferred

CVE-2026-6895HIGH

Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0025   16.3     —

AFFECTED
  Product          Versions     Fixed
  Wishlist Member  unspecified  —

TIMELINE
  Apr 23  Reserved by CNA
  May 23  Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · 2 references · NVD status: Deferred

CVE-2026-6897HIGH

Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0024   15.8     —

AFFECTED
  Product          Versions     Fixed
  Wishlist Member  unspecified  —

TIMELINE
  Apr 23  Reserved by CNA
  May 23  Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · 2 references · NVD status: Deferred

CVE-2026-6898HIGH

WishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0024   15.8     —

AFFECTED
  Product          Versions     Fixed
  Wishlist Member  unspecified  —

TIMELINE
  Apr 23  Reserved by CNA
  May 23  Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · 2 references · NVD status: Deferred

CVE-2026-9302LOW

546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0024   14.9     —

AFFECTED
  Product                   Versions                                    Fixed
  vps-inventory-monitoring  98c00b370668c96ae75e91c15548d9ea113652d9 –  —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-74, CWE-94 · CNA: VulDB · 6 references · NVD status: Deferred

CVE-2026-9299LOW

omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0023   13.9     —

AFFECTED
  Product  Versions  Fixed
  amf      2.1.0 –   —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-119 · CNA: VulDB · 6 references · NVD status: Deferred

CVE-2026-9300LOW

omec-project amf NGSetupRequest memory corruption

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0023   13.9     —

AFFECTED
  Product  Versions  Fixed
  amf      2.1.0 –   —

TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)

CWE-119 · CNA: VulDB · 6 references · NVD status: Deferred

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-9301	2.1	13.9	omec-project	amf	CWE-119	omec-project amf NGReset Message memory corruption
CVE-2026-9298	2.1	13.8	omec-project	amf	CWE-119	omec-project amf PathSwitchRequest memory corruption
CVE-2018-25347	7.1	12.0	web-dorado	Contact Form Maker	CWE-89	WordPress Contact Form Maker Plugin 1.12.20 SQL Injection
CVE-2018-25352	7.1	12.0	ultimate-form-builder-lite	Ultimate Form Builder Lite	CWE-89	WordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id
CVE-2026-9304	1.3	10.0	calcom	cal.diy	CWE-918	calcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgery
CVE-2018-25346	7.1	9.8	10Web	Form Maker	CWE-89	WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php
CVE-2026-9303	2.1	9.4	calcom	cal.diy	CWE-352	calcom cal.diy cross-site request forgery
CVE-2026-9305	2.1	9.2	QuantumNous	new-api	CWE-74	QuantumNous new-api self Endpoint topup.go SearchAllTopUps sql injection
CVE-2026-9342	2.1	9.2	SourceCodester	Hospitals Patient Records Management System	CWE-74	SourceCodester Hospitals Patient Records Management System view_history.php s…
CVE-2018-25345	8.6	6.3	10-Strike	Network Scanner	CWE-120	10-Strike Network Scanner 3.0 Local Buffer Overflow SEH
CVE-2018-25344	8.6	5.9	10-Strike	Network Inventory Explorer	CWE-121	10-Strike Network Inventory Explorer 8.54 Buffer Overflow SEH
CVE-2018-25355	8.6	5.9	Audiograbber	Audiograbber	CWE-120	Audiograbber 1.83 Local Buffer Overflow via SEH
CVE-2018-25356	8.6	5.9	Sipp	SIPp	CWE-120	SIPp 3.6 Local Buffer Overflow via Command-line Arguments
CVE-2018-25349	5.1	5.1	UserSpice	userSpice	CWE-79	userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header
CVE-2018-25343	5.3	3.2	Behance	Smartshop	CWE-352	Smartshop 1 Cross-Site Request Forgery via editprofile.php
CVE-2018-25354	5.3	3.2	Jomres	Jomres	CWE-352	Joomla Component jomres 9.11.2 Cross-Site Request Forgery

Standings

Leaders (trailing 30 days unless noted)

Transactions

Yesterday's Results

Methodology