Skip to content
Codexpert vulnerabilities
Newest
-
codexpert thumbpress – compress images, manage thumbnails, detect image issues, webp/avif, lazy loading, hotlinking & more
ThumbPress <= 6.2.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation
CVE-2026-7622
4.3 Medium
-
codexpert wc affiliate, wc affiliate – woocommerce affiliate plugin +1 more
WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-all
CVE-2024-12336
6.5 Medium
-
codexpert wc affiliate
WC Affiliate <= 2.3.9 - Reflected XSS
CVE-2024-12321
7.1 High
-
codexpert wc affiliate, wc affiliate – woocommerce affiliate plugin +1 more
WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting
CVE-2024-12334
6.1 Medium
-
codexpert duplica – duplicate posts, pages, custom posts or users
Duplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation
CVE-2024-5997
4.3 Medium
-
codexpert codesigner, codesigner – all in one elementor woocommerce builder +1 more
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injection
CVE-2024-4371
9.0 Critical
-
codexpert codesigner – all in one elementor woocommerce builder
CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-4564
6.4 Medium
-
codexpert search logger, unknown search logger – know what your visitors search +1 more
Search Logger <= 0.9 - Admin+ SQLi
CVE-2022-3131
7.2 High