Codection vulnerabilities

Products

• Import And Export Users And Customers 8
• Import Users From Csv With Meta 6
• Clean Login 4
• Import And Export Users And Customers 2

Newest

• carazo import and export users and customers WordPress Import and export users and customers plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-54862 6.5 MediumOctober 29, 2026
• codection products restricted users for woocommerce WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerability CVE-2026-107863 5.3 MediumOctober 12, 2026
• codection clean login Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion CVE-2024-8252 8.8 HighAugust 30, 2024
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability CVE-2024-38787 7.5 HighAugust 13, 2024
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability CVE-2024-22151 5.3 MediumJune 8, 2024
• carazo import and export users and customers Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-4734 4.4 MediumMay 15, 2024
• carazo import and export users and customers Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality CVE-2023-6583 6.6 MediumJanuary 11, 2024
• carazo import and export users and customers Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-6624 4.9 MediumJanuary 11, 2024
• codection clean login Clean Login < 1.13.7 - Contributor+ Stored XSS via Shortcode CVE-2022-4838 5.4 MediumFebruary 6, 2023
• carazo import and export users and customers Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection CVE-2022-3558 8.0 HighNovember 7, 2022
• carazo import and export users and customers Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting CVE-2022-1255 4.8 MediumMay 2, 2022
• codection import and export users and customers Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via... CVE-2020-22277 8.0 HighNovember 4, 2020
• codection import users from csv with meta The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal. CVE-2019-15326 7.5 HighAugust 22, 2019
• codection import users from csv with meta The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data. CVE-2019-15327 6.1 MediumAugust 22, 2019
• codection import users from csv with meta The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS. CVE-2019-15328 6.1 MediumAugust 22, 2019
• codection import users from csv with meta The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF. CVE-2019-15329 8.8 HighAugust 22, 2019
• codection clean login The clean-login plugin before 1.5.1 for WordPress has reflected XSS. CVE-2015-9336 6.1 MediumAugust 22, 2019
• codection import users from csv with meta The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp... CVE-2019-14683 5.7 MediumAugust 8, 2019
• codection import users from csv with meta The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via... CVE-2018-20101 6.1 MediumDecember 12, 2018
• codection clean login CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the... CVE-2017-8875 6.5 MediumMay 10, 2017