Codesupplyco Powerkit vulnerabilities

• codesupplyco powerkit – supercharge your wordpress site Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing CVE-2026-2390 6.4 MediumSeptember 7, 2026
• codesupplyco powerkit WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-28178 6.5 MediumAugust 6, 2026
• codesupplyco powerkit – supercharge your wordpress site Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute CVE-2026-15644 6.4 MediumAugust 1, 2026
• codesupplyco powerkit – supercharge your wordpress site Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-15649 6.4 MediumAugust 1, 2026
• codesupplyco powerkit – supercharge your wordpress site Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute CVE-2026-15645 6.4 MediumAugust 1, 2026
• codesupplyco powerkit, powerkit – supercharge your wordpress site +1 more Powerkit – Supercharge your WordPress Site <= 2.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2458 6.4 MediumApril 6, 2024