Vendor

    Bandido

    6 known vulnerabilities in products by Bandido, 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bandido
    MediumCVE-2024-12049

    Woo Ukrposhta <= 1.17.11 - Reflected Cross-Site Scripting via order, post, and idd Parameters

    		6.1
    MediumCVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    also in 152 other products

    		6.3
    MediumCVE-2025-6720

    Vchasno Kasa <= 1.0.3 - Unauthenticated Log File Clearing

    		5.3
    MediumCVE-2025-6721

    Vchasno Kasa <= 1.0.3 - Missing Authorization to Unauthenticated Invoice Generation

    		5.3
    MediumCVE-2025-12170

    Checkbox <= 2.8.10 - Missing Authorization to Unauthenticated Log Clearing

    		5.3
    MediumCVE-2026-2292

    Bandido Morkva UA Shipping: Cross-site Scripting

    		4.4