Codexpert - vulnerabilities (CVEs)
8 CVEs in 14 products, 0 in the last 30 days, newest from 2026-09-22.
Products
- Wc Affiliate - 3 CVEs
- Codesigner All In One Elementor Woocommerce Builder - 2 CVEs
- Wc Affiliate Woocommerce Affiliate Plugin - 2 CVEs
- Codesigner - 1 CVEs
- Custom Posts Or Users - 1 CVEs
- Detect Image Issues - 1 CVEs
- Duplica Duplicate Posts - 1 CVEs
- Hotlinking More - 1 CVEs
- Lazy Loading - 1 CVEs
- Manage Thumbnails - 1 CVEs
- Pages - 1 CVEs
- Search Logger - 1 CVEs
- Thumbpress Compress Images - 1 CVEs
- Webpavif - 1 CVEs
Newest CVEs of Codexpert
- CVE-2026-7622 - CVSS 4.3 (medium), 2026-09-22: The ThumbPress plugin for WordPress is vulnerable to unauthorized access in versions up to and including 6.2.1. This is due to missing capability checks and…
- CVE-2024-12336 - CVSS 6.5 (medium), 2025-03-15: The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check…
- CVE-2024-12321 - CVSS 7.1 (high), 2025-01-27: The WC Affiliate WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
- CVE-2024-12334 - CVSS 6.1 (medium), 2025-01-26: The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all…
- CVE-2024-5997 - CVSS 4.3 (medium), 2024-07-18: The Duplica – Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
- CVE-2024-4371 - CVSS 9.8 (critical), 2024-06-13: The CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More plugin for WordPress is vulnerable to PHP Object Injection…
- CVE-2024-4564 - CVSS 6.4 (medium), 2024-06-12: The CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More plugin for WordPress is vulnerable to Stored Cross-Site…
- CVE-2022-3131 - CVSS 7.2 (high), 2022-10-17: The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL…
