Maccmspro vulnerabilities
We track 1 vulnerability in Maccmspro products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Maccmspro vulnerabilities
- 9.1 Critical severity
maccms10: Weak Password Recovery Mechanism for Forgotten Password
MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via user