AyeCode Ltd vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20221
3. 20231
4. 20243
5. 20264

Newest CVEs

• CVE-2026-119749

  GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass

  AyeCode Ltd · Payment forms, Buy now buttons, and Invoicing System | GetPaid

  High8.7
• CVE-2026-119748

  GetPaid WordPress Plugin < 2.8.63 Authorization Bypass via maybe_use_invoice

  AyeCode Ltd · Payment forms, Buy now buttons, and Invoicing System | GetPaid

  Medium6.9
• CVE-2026-119747

  GetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST API

  AyeCode Ltd · Payment forms, Buy now buttons, and Invoicing System | GetPaid

  High7.1
• CVE-2026-85705

  Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parameters

  AyeCode Ltd · Location Manager

  High7.5
• CVE-2024-43277

  WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability

  AyeCode Ltd · UsersWP

  Medium5.3
• CVE-2024-43145

  WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability

  AyeCode Ltd · GeoDirectory

  High8.5
• CVE-2024-31936

  WordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability

  AyeCode Ltd · UsersWP

  Medium5.4
• CVE-2022-47442

  WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection

  AyeCode Ltd · UsersWP

  Medium5.8
• CVE-2022-29453

  WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

  AyeCode Ltd · API KEY for Google Maps

  Medium5.4
• CVE-2021-24369

  GetPaid < 2.3.4 - Authenticated Stored XSS

  AyeCode Ltd · WordPress Payments Plugin | GetPaid

  Medium5.4