Read the docs

Codexpert, Inc

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Codexpert, Inc records in CISA KEV

No Codexpert, Inc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wc Affiliate 3 records MEDIUM Codesigner 1 record MEDIUM Search Logger 1 record HIGH

Records

3 records in Wc Affiliate · all components

TI-2024-11428 CVE-2024-12321 · GHSA-mj6j-32rm-jv58

WC Affiliate <= 2.3.9 - Reflected XSS

Priority MEDIUM 64

The WC Affiliate WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00285 Published 2025-01-27 No fix listed CWE-79
TI-2024-11443 CVE-2024-12336 · GHSA-5jx7-r789-wq9q

Missing authorization in Codexpert, Inc WC Affiliate – WooCommerce Affiliate Plugin

Priority LOW 29

The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data' function in all versions up to, and…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00354 Published 2025-03-15 No fix listed CWE-862
TI-2024-11441 CVE-2024-12334 · GHSA-x7qc-wx3v-p86v

WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting

Priority LOW 27

The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versions up to, and including, 2.4 due to insufficient input saniti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0029 Published 2025-01-26 No fix listed CWE-79
Open these records in search →