codexpert vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20252
3. 20261

Newest CVEs

• CVE-2026-7622

  ThumbPress <= 6.2.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation

  codexpert · ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More

  Medium4.3
• CVE-2024-12336

  WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-all

  codexpert · WC Affiliate – WooCommerce Affiliate Plugin

  Medium6.5
• CVE-2024-12334

  WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting

  codexpert · WC Affiliate – WooCommerce Affiliate Plugin

  Medium6.1
• CVE-2024-5997

  Duplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation

  codexpert · Duplica – Duplicate Posts, Pages, Custom Posts or Users

  Medium4.3
• CVE-2024-4371

  CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injection

  codexpert · CoDesigner – All in One Elementor WooCommerce Builder

  Critical9.0
• CVE-2024-4564

  CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  codexpert · CoDesigner – All in One Elementor WooCommerce Builder

  Medium6.4