Read the docs

AyeCode Ltd

Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

AyeCode Ltd records in CISA KEV

No AyeCode Ltd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Geodirectory 9 records HIGH Userswp 5 records HIGH Getpaid 2 records LOW Api Key For Google Maps 1 record LOW Cafe Bistro 1 record LOW College 1 record LOW Directory 1 record LOW Ketchup Shortcodes 1 record LOW

Records

2 records in Getpaid · all components

TI-2024-29562 CVE-2024-43973 · GHSA-cr5c-wqxh-9q79

WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through <= 2.8.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00466 Published 2024-11-01 No fix listed CWE-862
TI-2021-06661 CVE-2021-24369 · GHSA-83pg-f5q7-v37g

GetPaid < 2.3.4 - Authenticated Stored XSS

Priority LOW 25

In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-06-21 Fixed in 2.3.4 CWE-79
Open these records in search →