Codecanyon vulnerabilities
22 published CVEs name Codecanyon among the affected products.
- Published CVEs
- 22
- Last 12 months
- 11
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 21Low 1Not scored 0
CVEs per yearBy the year they were published
- 20232
- 20244
- 202512
- 20264
Newest CVEs
- CVE-2026-102290
CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting
CodeCanyon · Rocket LMS
Medium5.1 - CVE-2026-19966
CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization
CodeCanyon · TimeCamp Integration for CRM
Medium5.3 - CVE-2026-7783
CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection
CodeCanyon · Perfex CRM
Medium5.3 - CVE-2026-7782
CodeCanyon Perfex CRM Tenant Clients.php project authorization
CodeCanyon · Perfex CRM
Medium5.3 - CVE-2025-13239
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow
Bdtask · Isshue Multi Store eCommerce Shopping Cart Solution
Medium5.3 - CVE-2025-13186
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting
Bdtask · Isshue Multi Store eCommerce Shopping Cart Solution
Medium4.8 - CVE-2025-13185
Bdtask/CodeCanyon News365 profile unrestricted upload
Bdtask · News365
Medium5.1 - CVE-2025-13180
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting
Bdtask · Wholesale Inventory Control and Inventory Management System
Medium5.1 - CVE-2025-13179
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery
Bdtask · Wholesale Inventory Control and Inventory Management System
Medium5.3 - CVE-2025-13178
Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting
Bdtask · SalesERP
Medium5.1
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)9
- CWE-94 Code injection4
- CWE-74 Injection3
- CWE-89 SQL injection3
- CWE-284 Improper access control2
- CWE-285 Improper authorization2
- CWE-352 Cross-site request forgery (CSRF)2
- CWE-434 Unrestricted file upload2
- CWE-639 Authorization bypass through a user-controlled key (IDOR)2
- CWE-80 Basic cross-site scripting2