NamelessMC vulnerabilities
We track 5 vulnerabilities in NamelessMC products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2026.
Latest NamelessMC vulnerabilities
- 7.1 High severity
Nameless: Improper Authorization
NamelessMC is website software for Minecraft servers. In version 2.2.4, `modules/Forum/pages/forum/get_quotes.php` only checks whether the caller is logged in, then reads a post by attacker-controlled `post` ID and returns its content. The backend helper in `m
- 7.1 High severity
Nameless: Uncontrolled Resource Consumption
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum quick reply feature (view_topic.php) does not implement any spam prevention mechanism. This allows authenticated users to continuously post r
- 7.1 High severity
Nameless: Uncontrolled Resource Consumption
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the forum allows users to post iframe elements inside forum topics/comments/feed with no restriction on the iframe's width and height attributes. T
- 7.5 High severity
NamelessMC is a free, easy to use & powerful website software for Minecraft servers.
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum search functionality lacks length validation, allowing attackers to submit excessively long search querie
- 9.8 Critical severity
Nameless: Weak Password Recovery Mechanism for Forgotten Password
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can validate users and an attacker can reset their password. When the account is successfully approved by ema