Skip to content
OpenAdvisories

Vendor

Labs64

5 known vulnerabilities.

Products

NetLicensing-MCP 2 DigiPass 1 Credit Tracker 1 PluginPass 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-54446

    NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

    NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Au…

    Labs64 NetLicensing-MCP netlicensing-mcp PyPI
  • High 8.6
    CVE-2024-54291

    WordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 PluginPass pluginpass-pro-plugintheme-licensing allows Manipulating Web Input to File System Calls.This issue affects PluginPass: from n/a through <= 0.9.10.

    Labs64 PluginPass
  • High 7.5
    CVE-2024-52378

    WordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 DigiPass digipass allows Absolute Path Traversal.This issue affects DigiPass: from n/a through <= 0.3.0.

    Labs64 DigiPass