Ayecode Ltd vulnerabilities

Products

• Getpaid 4
• Payment Forms, Buy Now Buttons, And Invoicing System | Getpaid 3
• Userswp 3
• Location Manager 2

Newest

• ayecode ltd payment forms, buy now buttons, and invoicing system | getpaid GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass CVE-2026-119749 8.7 HighNovember 4, 2026
• ayecode ltd payment forms, buy now buttons, and invoicing system | getpaid GetPaid WordPress Plugin < 2.8.63 Authorization Bypass via maybe_use_invoice CVE-2026-119748 6.9 MediumNovember 4, 2026
• ayecode ltd payment forms, buy now buttons, and invoicing system | getpaid GetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST API CVE-2026-119747 7.1 HighNovember 4, 2026
• ayecode ltd getpaid WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability CVE-2026-115609 7.1 HighOctober 28, 2026
• ayecode ltd location manager Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parameters CVE-2026-85705 7.5 HighSeptember 18, 2026
• ayecode ltd getpaid GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification CVE-2026-12901 5.9 MediumAugust 6, 2026
• ayecode ltd getpaid WordPress GetPaid plugin <= 2.8.49 - Sensitive Data Exposure vulnerability CVE-2026-49064 7.5 HighJune 15, 2026
• ayecode userswp WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability CVE-2024-43277 5.3 MediumNovember 1, 2024
• ayecode getpaid WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability CVE-2024-43973 4.3 MediumNovember 1, 2024
• ayecode geodirectory WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability CVE-2024-43145 8.5 HighAugust 18, 2024
• ayecode ltd userswp WordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31936 5.4 MediumApril 11, 2024
• ayecode userswp WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection CVE-2022-47442 5.8 MediumNovember 7, 2023
• ayecode api key for google maps WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update CVE-2022-29453 5.4 MediumJune 15, 2022
• ayecode getpaid, ayecode ltd wordpress payments plugin | getpaid +1 more GetPaid < 2.3.4 - Authenticated Stored XSS CVE-2021-24369 5.4 MediumJune 21, 2021
• ayecode location manager GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections CVE-2021-24361 9.8 CriticalJune 21, 2021