Codesupplyco vulnerabilities

Products

• Powerkit – Supercharge Your Wordpress Site 5
• Advanced Popups 2
• Powerkit 2

Newest

• codesupplyco advanced popups Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field CVE-2026-11996 6.4 MediumSeptember 16, 2026
• codesupplyco powerkit – supercharge your wordpress site Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing CVE-2026-2390 6.4 MediumSeptember 7, 2026
• codesupplyco powerkit WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-28178 6.5 MediumAugust 6, 2026
• codesupplyco powerkit – supercharge your wordpress site Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute CVE-2026-15644 6.4 MediumAugust 1, 2026
• codesupplyco powerkit – supercharge your wordpress site Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-15649 6.4 MediumAugust 1, 2026
• codesupplyco powerkit – supercharge your wordpress site Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute CVE-2026-15645 6.4 MediumAugust 1, 2026
• codesupplyco uppercase WordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability CVE-2026-39559 8.1 HighJune 17, 2026
• codesupplyco canvas Canvas <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Block Attribute CVE-2026-9629 6.4 MediumJune 13, 2026
• codesupplyco networker WordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability CVE-2025-52723 8.1 HighJune 27, 2025
• codesupply sight, codesupplyco sight – professional image gallery and portfolio, sight professional image gallery and portfolio +2 more Sight – Professional Image Gallery and Portfolio <= 1.1.2 - Missing Authorization to Sensitive Information Exposure in handler_post_title CVE-2024-9025 5.3 MediumSeptember 26, 2024
• codesupplyco powerkit, powerkit – supercharge your wordpress site +1 more Powerkit – Supercharge your WordPress Site <= 2.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2458 6.4 MediumApril 6, 2024
• codesupplyco networker - tech news wordpress theme with dark mode, networker technews wordpress theme with dark mode +1 more Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization CVE-2024-2962 5.3 MediumMarch 27, 2024
• code supply co. absolute reviews Absolute Reviews <= 1.0.8 - Cross-Site Request Forgery Bypass CVE-2021-4426 4.3 MediumJuly 12, 2023
• ashstonestudios advanced popups Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass CVE-2021-4421 4.3 MediumJuly 12, 2023