Read the docs

codisto

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

codisto records in CISA KEV

No codisto vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-10752 CVE-2025-11727 · GHSA-wrqp-2jf5-h35r

Cross-site scripting in codisto Omnichannel for WooCommerce: Google, Amazon, eBay &…

Priority LOW 37

The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync() function in all versions up to, and includ…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00307 Published 2025-12-04 No fix listed CWE-79
TI-2025-41650 CVE-2025-68041 · GHSA-vg59-g4j9-2q98

WordPress Omnichannel for WooCommerce plugin <= 1.3.65 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: f…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2026-01-22 No fix listed CWE-79
Open these records in search →