Read the docs

codetipi

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

codetipi records in CISA KEV

No codetipi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
15zine 1 record LOW

Records

3 records

TI-2026-18966 CVE-2026-23544 · GHSA-xprw-mh67-9xf5

WordPress Valenti theme <= 5.6.3.5 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection.This issue affects Valenti: from n/a through <= 5.6.3.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2026-02-19 No fix listed CWE-502
TI-2020-18746 CVE-2020-36510 · GHSA-rmfp-978v-2wq8

15Zine < 3.3.0 - Reflected Cross-Site Scripting

Priority LOW 32

The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cb_s_a AJAX action, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0259 Published 2022-02-28 Fixed in 3.3.0 CWE-79
TI-2025-39169 CVE-2025-63021 · GHSA-5g6x-4m6w-r256

WordPress Valenti Engine plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codetipi Valenti Engine valenti-engine allows DOM-Based XSS.This issue affects Valenti Engine: from n/a through <= 1.0…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00193 Published 2025-12-31 No fix listed CWE-79
Open these records in search →