Read the docs

Jcodex

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Jcodex records in CISA KEV

No Jcodex vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Priority LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862
TI-2024-20638 CVE-2024-31262 · GHSA-wfv8-v329-vr74

Cross-site request forgery in Jcodex WooCommerce Checkout Field Editor

Priority LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Jcodex WooCommerce Checkout Field Editor (Checkout Manager).This issue affects WooCommerce Checkout Field Editor (Checkout Manager): from n/a through 2.1.8.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00197 Published 2024-04-12 No fix listed CWE-352
Open these records in search →