Midoks vulnerabilities
We track 2 vulnerabilities in Midoks products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Midoks vulnerabilities
- 9.8 Critical severity
mdserver-web: Improper Neutralization of Special Elements used in an OS Command
mdserver-web is a simple Linux panel. From 0.18.0 to 0.18.4, mdserver-web has a front-end unauthorized remote command execution vulnerability. Due to the lack of authentication on the /modify_crond and /start_task interfaces, it is possible to modify the defau
- 7.1 High severity
WP微信机器人: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in midoks WP微信机器人 wp-weixin-robot allows Stored XSS.This issue affects WP微信机器人: from n/a through <= 5.3.5.