2code vulnerabilities

Products

• Wpqa Builder 10
• Himer 6
• Discy 3
• Ask Me 2

Newest

• 2code himer Himer - Social Questions and Answers < 2.1.3 - CSRF While Sending the Invites CVE-2024-2232 8.1 HighAugust 5, 2024
• 2code wpqa builder WPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRF CVE-2024-2376 8.8 HighJuly 3, 2024
• 2code wpqa builder WPQA < 6.1.1 - Contributor+ Stored XSS CVE-2024-2375 5.4 MediumJuly 3, 2024
• 2code himer Himer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRF CVE-2024-2235 4.3 MediumJuly 3, 2024
• 2code himer Himer - Social Questions and Answers < 2.1.1 - Contributor+ Stored XSS CVE-2024-2234 5.4 MediumJuly 3, 2024
• 2code himer Himer - Social Questions and Answers < 2.1.1 - Multiple CSRF on the Group Section CVE-2024-2233 4.3 MediumJuly 3, 2024
• 2code himer Himer - Social Questions and Answers < 2.1.1 - Subscriber+ Private Group Joining via IDOR CVE-2024-2231 6.5 MediumJuly 3, 2024
• 2code himer Himer - Social Questions and Answers < 2.1.1 - Arbitrary Group Joining via CSRF CVE-2024-2040 4.3 MediumJuly 3, 2024
• 2code wpqa builder, unknown discy, himer +2 more WPQA < 5.9.3 - Missing validation lead to functionality abuse CVE-2022-3343 3.5 LowJanuary 9, 2023
• 2code wpqa builder WPQA < 5.9 - Follow/Unfollow via CSRF CVE-2022-3688 8.8 HighNovember 21, 2022
• 2code wpqa builder WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR CVE-2022-2198 4.3 MediumAugust 22, 2022
• 2code discy Discy < 5.0 - Subscriber+ Broken Access Control to change settings CVE-2022-1323 6.5 MediumAugust 8, 2022
• 2code wpqa builder WPQA < 5.5 - Unauthenticated Private Message Disclosure CVE-2022-1598 Public exploit 5.3 MediumJune 6, 2022
• 2code wpqa builder WPQA < 5.4 - Reflected Cross-Site Scripting CVE-2022-1597 Public exploit 6.1 MediumJune 6, 2022
• 2code ask me Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions CVE-2022-1424 6.5 MediumJune 6, 2022
• 2code discy Discy < 5.2 - Restore Default Settings via CSRF CVE-2022-1422 6.5 MediumJune 6, 2022
• 2code discy Discy < 5.2 - Settings Update via CSRF CVE-2022-1421 Public exploit 4.3 MediumJune 6, 2022
• 2code ask me Ask Me < 6.8.2 - Reflected Cross-Site Scripting CVE-2022-1241 6.1 MediumJune 6, 2022
• 2code wpqa builder, unknown wpqa builder plugin +1 more WPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOR CVE-2022-1425 4.3 MediumMay 16, 2022
• 2code wpqa builder, unknown wpqa builder plugin +1 more WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOR CVE-2022-1349 4.3 MediumMay 16, 2022
• 2code wpqa builder, unknown wpqa builder plugin +1 more WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields CVE-2022-1051 Public exploit 5.4 MediumMay 16, 2022