Codexpert Inc - vulnerabilities (CVEs)
10 CVEs in 7 products, 0 in the last 30 days, newest from 2026-08-18.
Products
- Coschool Lms - 3 CVEs
- Codesigner - 2 CVEs
- Thumbpress - 2 CVEs
- Cf7 Submissions - 1 CVEs
- Columns And Sections - 1 CVEs
- Restrict Elementor Widgets - 1 CVEs
- Wc Affiliate - 1 CVEs
Newest CVEs of Codexpert Inc
- CVE-2026-32549 - CVSS 7.5 (high), 2026-08-18: Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.
- CVE-2026-57720 - CVSS 4.3 (medium), 2026-07-01: Missing Authorization vulnerability in Codexpert Inc ThumbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects…
- CVE-2025-64244 - CVSS 4.3 (medium), 2025-12-16: Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Sections restrict-elementor-widgets allows Exploiting…
- CVE-2025-60239 - CVSS 8.5 (high), 2025-11-06: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codexpert, Inc CoSchool LMS coschool allows Blind SQL…
- CVE-2025-58016 - CVSS 4.3 (medium), 2025-09-22: Missing Authorization vulnerability in Codexpert, Inc CF7 Submissions cf7-submissions allows Exploiting Incorrectly Configured Access Control Security…
- CVE-2025-57961 - CVSS 4.3 (medium), 2025-09-22: Missing Authorization vulnerability in Codexpert, Inc CoDesigner woolementor allows Exploiting Incorrectly Configured Access Control Security Levels.This…
- CVE-2025-30973 - CVSS 9.8 (critical), 2025-07-16: Deserialization of Untrusted Data vulnerability in Codexpert, Inc CoSchool LMS coschool allows Object Injection.This issue affects CoSchool LMS: from n/a…
- CVE-2025-47660 - CVSS 8.8 (high), 2025-05-23: Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate wc-affiliate allows Object Injection.This issue affects WC Affiliate: from n/a…
- CVE-2025-22788 - CVSS 5.9 (medium), 2025-01-15: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codexpert, Inc CoDesigner woolementor allows Stored…
- CVE-2024-54296 - CVSS 9.8 (critical), 2024-12-13: Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS coschool allows Authentication Bypass.This issue affects…
