Skip to content
Ayecode vulnerabilities
Newest
-
ayecode restaurante
WordPress Restaurante theme <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-52746
7.1 High
-
ayecode geodirectory
GeoDirectory < 2.8.120 - Contributor+ Stored XSS
CVE-2025-6200
5.9 Medium
-
ayecode ketchup shortcodes
WordPress Ketchup Shortcodes Plugin <= 0.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24673
6.5 Medium
-
ayecode ketchup shortcodes
Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13590
6.4 Medium
-
ayecode geodirectory
WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability
CVE-2024-56259
6.5 Medium
-
ayecode connect, stiofan ayecode connect +1 more
WordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerability
CVE-2024-56255
4.3 Medium
-
ayecode userswp
WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability
CVE-2024-43277
5.3 Medium
-
ayecode getpaid
WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability
CVE-2024-43973
4.3 Medium
-
ayecode geodirectory
WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability
CVE-2024-43981
4.3 Medium
-
ayecode geodirectory
WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability
CVE-2024-50437
6.5 Medium
-
ayecode geodirectory
WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability
CVE-2024-43145
8.5 High
-
ayecode userswp
UsersWP < 1.2.12 - Users Information Disclosure
CVE-2024-6477
7.5 High
-
ayecode userswp, stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wp +1 more
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by'
CVE-2024-6265
9.8 Critical
-
ayecode geodirectory, paoltaia geodirectory – wp business directory plugin and classified listings directory +1 more
GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode
CVE-2024-3732
6.4 Medium
-
ayecode userswp, stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wp +1 more
UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-2423
6.4 Medium
-
ayecode geodirectory, ayecode - wordpress business directory plugins geodirectory – wordpress business directory plugin, or classified directory +1 more
WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection
CVE-2023-50845
7.6 High
-
ayecode userswp
WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection
CVE-2022-47442
5.8 Medium
-
ajaydsouza connections reloaded, archimidismertzanos atlast business, fashionable store +47 more +49 more
Multiple Themes - Reflected XSS
CVE-2023-2813
6.1 Medium
-
ayecode geodirectory
GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode
CVE-2022-4775
5.4 Medium
-
ayecode api key for google maps
WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update
CVE-2022-29453
5.4 Medium
-
ayecode userswp, unknown userswp – user registration & user profile +1 more
UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override
CVE-2022-0442
4.3 Medium
-
ayecode geodirectory, unknown business directory plugin | geodirectory +1 more
GeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS)
CVE-2021-24720
5.4 Medium
-
ayecode getpaid, ayecode ltd wordpress payments plugin | getpaid +1 more
GetPaid < 2.3.4 - Authenticated Stored XSS
CVE-2021-24369
5.4 Medium
-
ayecode location manager
GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections
CVE-2021-24361
9.8 Critical