Skip to content
Codecanyon vulnerabilities
Newest
-
codecanyon rocket lms
CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting
CVE-2026-102290
5.1 Medium
-
codecanyon timecamp integration for crm
CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization
CVE-2026-19966
5.3 Medium
-
codecanyon perfex crm
CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection
CVE-2026-7783
5.3 Medium
-
codecanyon perfex crm
CodeCanyon Perfex CRM Tenant Clients.php project authorization
CVE-2026-7782
5.3 Medium
-
bdtask isshue, isshue multi store ecommerce shopping cart solution +1 more
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow
CVE-2025-13239
5.3 Medium
-
bdtask isshue, isshue multi store ecommerce shopping cart solution +1 more
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting
CVE-2025-13186
4.8 Medium
-
bdtask news365
Bdtask/CodeCanyon News365 profile unrestricted upload
CVE-2025-13185
5.1 Medium
-
bdtask wholesale, wholesale inventory control and inventory management system +1 more
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting
CVE-2025-13180
5.1 Medium
-
bdtask wholesale, wholesale inventory control and inventory management system +1 more
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery
CVE-2025-13179
5.3 Medium
-
bdtask saleserp
Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting
CVE-2025-13178
5.1 Medium
-
bdtask saleserp
Bdtask/CodeCanyon SalesERP cross-site request forgery
CVE-2025-13177
5.3 Medium
-
codecanyon mentor lms
CodeCanyon/ui-lib Mentor LMS API cross-domain policy
CVE-2025-11304
5.3 Medium
-
codecanyon perfex crm, perfex crm crm +1 more
HTML injection in Perfex CRM
CVE-2025-10346
5.3 Medium
-
codecanyon perfex crm, perfex crm crm +1 more
HTML injection in Perfex CRM
CVE-2025-10345
5.3 Medium
-
codecanyon perfex crm, perfex crm crm +1 more
HTML injection in Perfex CRM
CVE-2025-10344
5.3 Medium
-
codecanyon perfex crm, perfex crm crm +1 more
HTML injection in Perfex CRM
CVE-2025-10343
5.3 Medium
-
codecanyon perfex crm, perfex crm crm +1 more
HTML injection in Perfex CRM
CVE-2025-10342
5.3 Medium
-
codecanyon perfex crm, perfex crm crm +1 more
HTML injection in Perfex CRM
CVE-2025-10341
5.3 Medium
-
ambitiousitbd identsoft
Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload
CVE-2025-7898
5.1 Medium
-
codecanyon rise ultimate project manager
CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection
CVE-2025-3855
Public exploit
5.3 Medium
-
codecanyon perfex crm
CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting
CVE-2025-3219
5.1 Medium
-
codecanyon perfex crm
CodeCanyon Perfex CRM Contracts contract cross site scripting
CVE-2025-2974
5.1 Medium
-
codecanyon wooevents, ex-themes wooevents - calendar and event booking +1 more
WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite
CVE-2024-8671
9.1 Critical
-
codecanyon crmgo saas
CodeCanyon CRMGo SaaS show cross site scripting
CVE-2024-9031
5.3 Medium
-
codecanyon crmgo saas
CodeCanyon CRMGo SaaS note cross site scripting
CVE-2024-9030
5.3 Medium
-
codecanyon rise ultimate project manager
CodeCanyon RISE Ultimate Project Manager save sql injection
CVE-2024-8945
Public exploit
EPSS 16.0%
5.3 Medium
-
bdtask isshue multi store ecommerce shopping cart solution
Bdtask Isshue Multi Store eCommerce Shopping Cart Solution Manage Sale Page manage_invoice cross site scripting
CVE-2024-2133
2.4 Low
-
codecanyon rise ultimate project manager, rise rise ultimate project manager +1 more
CodeCanyon RISE Ultimate Project Manager signin redirect
CVE-2024-0545
6.9 Medium
-
codecanyon credit lite, credit lite project lite +1 more
Codecanyon Credit Lite POST Request account_statement sql injection
CVE-2023-4407
Public exploit
6.3 Medium
-
codecanyon tiva events calender, tiva events calendar project events calendar +1 more
Codecanyon Tiva Events Calender cross site scripting
CVE-2023-3787
3.5 Low
-
codecanyon phpsound
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to...
CVE-2014-8954
Public exploit
4.3 Medium