Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

mdedev — Vulnerabilities & Security Advisories 3

Browse all 3 CVE security advisories affecting mdedev. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mdedev develops web applications and APIs for enterprise clients, with a core focus on custom business solutions. Historically, vulnerabilities associated with mdedev include remote code execution, cross-site scripting, and privilege escalation, often stemming from insufficient input validation and misconfigured access controls. While no major public security incidents have been documented, the three CVEs on record highlight recurring issues in sanitizing user inputs and managing authentication mechanisms. Security assessments indicate inconsistent implementation of secure coding practices, particularly in session management and error handling, which could expose client systems to unauthorized access or data compromise.

CVE ID Title CVSS Severity Published
CVE-2026-25023 WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin <= 2.0.7 - Sensitive Data Exposure vulnerability — Run Contests, Raffles, and Giveaways with ContestsWP CWE-497 5.3 Medium 2026-02-03
CVE-2025-32634 WordPress Run Contests, Raffles, and Giveaways plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability — Run Contests, Raffles, and Giveaways with ContestsWP CWE-79 7.1 High 2025-04-17
CVE-2024-11456 Run Contests, Raffles, and Giveaways with ContestsWP <= 2.0.3 - Reflected Cross-Site Scripting — Run Contests, Raffles, and Giveaways with ContestsWP CWE-79 6.1 Medium 2024-11-21

This page lists every published CVE security advisory associated with mdedev. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.