codnloc

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

codnloc records in CISA KEV

No codnloc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phptransformer 2 records HIGH

Records

3 records

TI-2019-15632 CVE-2019-25579 · GHSA-5w97-394v-8832

phpTransformer 2016.9 Directory Traversal via jQueryFileUpload

HIGH 77

phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01134 Published 2026-03-21 No fix listed CWE-22

TI-2019-15631 CVE-2019-25578 · GHSA-hg45-6q92-44jh

phpTransformer 2016.9 SQL Injection via GeneratePDF.php

HIGH 77

phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idnews parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00392 Published 2026-03-21 No fix listed CWE-89

TI-2025-12782 CVE-2025-13987 · GHSA-94w4-hgr4-v67m

Purchase and Expense Manager <= 1.1.2 - Cross-Site Request Forgery to Arbitrary Purchase Record Deletion

LOW 19

The Purchase and Expense Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00151 Published 2025-12-12 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0