What’s Vulnerable › Products

rathena FluxCP vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your rathena FluxCP version is affected

Latest rathena FluxCP vulnerabilities

• CVE-2026-116254 — rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation (CVSS 6.5)
• CVE-2025-62797 — CSRF in FluxCP account endpoints allows account takeover / state-changing actions (CVSS 8.6)
• CVE-2024-45799 — Javascript Injection in Vending Info/Buyers Info Module in FluxCP (CVSS 6.1)
• CVE-2022-4421 — rAthena FluxCP Service Desk Image URL view.php cross site scripting (CVSS 6.1)