Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Wpcode Component: Wpcode Clear all filters
TI-2023-03289 CVE-2023-3524 · GHSA-h799-5x6c-6gv8

WPCode < 2.0.13.1 - Reflected XSS

Priority MEDIUM 60

The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00522 Published 2023-08-07 Fixed in 2.0.13.1
TI-2023-01528 CVE-2023-1624 · GHSA-2h2j-55g7-g43c

WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF

Priority MEDIUM 62

The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00307 Published 2023-04-24 Fixed in 2.0.9