codesupplyco vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20243
3. 20251
4. 20268

Newest CVEs

• CVE-2026-11996

  Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field

  codesupplyco · Advanced Popups

  Medium6.4
• CVE-2026-2390

  Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing

  codesupplyco · Powerkit – Supercharge your WordPress Site

  Medium6.4
• CVE-2026-28178

  WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

  codesupplyco · Powerkit

  Medium6.5
• CVE-2026-15644

  Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute

  codesupplyco · Powerkit – Supercharge your WordPress Site

  Medium6.4
• CVE-2026-15649

  Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  codesupplyco · Powerkit – Supercharge your WordPress Site

  Medium6.4
• CVE-2026-15645

  Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute

  codesupplyco · Powerkit – Supercharge your WordPress Site

  Medium6.4
• CVE-2026-39559

  WordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability

  codesupplyco · Uppercase

  High8.1
• CVE-2026-9629

  Canvas <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Block Attribute

  codesupplyco · Canvas

  Medium6.4
• CVE-2025-52723

  WordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability

  codesupplyco · Networker

  High8.1
• CVE-2024-9025

  Sight – Professional Image Gallery and Portfolio <= 1.1.2 - Missing Authorization to Sensitive Information Exposure in handler_post_title

  codesupplyco · Sight – Professional Image Gallery and Portfolio

  Medium5.3