Vulnerabilities

TI-2026-70371 CVE-2026-62024 · GHSA-hpfr-835p-qqmv

Arbitrary file upload in CodeBard Help Desk WordPress plugin

MEDIUM 43

Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00434 Published 2026-10-10 No fix listed CWE-434

TI-2025-16638 CVE-2025-22757 · GHSA-6qcc-737v-m9qh

WordPress CodeBard Help Desk plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Stored XSS.This issue affects CodeBard Help Desk: from n/a throu…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00264 Published 2025-01-31 No fix listed CWE-79

TI-2025-16641 CVE-2025-22760 · GHSA-pcqf-5mmm-j2v3

WordPress CodeBard Help Desk plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00283 Published 2025-01-15 No fix listed CWE-79

TI-2024-37192 CVE-2024-56222 · GHSA-pfpg-w2wm-jprg

WordPress CodeBard Help Desk plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Cross Site Request Forgery.This issue affects CodeBard Help Desk: from n/a through <= 1.1.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0017 Published 2024-12-31 No fix listed CWE-352

TI-2024-23094 CVE-2024-34807 · GHSA-m99v-vmm7-frwm

WordPress Fast Custom Social Share by CodeBard plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in CodeBard Fast Custom Social Share by CodeBard fast-custom-social-share-by-codebard.This issue affects Fast Custom Social Share by CodeBard: from n/a through <= 1.1.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00174 Published 2024-05-17 No fix listed CWE-352

TI-2024-22398 CVE-2024-33928 · GHSA-f72p-cqvh-qg6q

Cross-site scripting in CodeBard's Patron Button and Widgets for Patreon

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon allows Reflected XSS.This issue affects CodeBard's Patron Bu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0033 Published 2024-05-03 No fix listed CWE-79

TI-2023-26192 CVE-2023-48329 · GHSA-29ch-225m-h3vc

WordPress Fast Custom Social Share by CodeBard Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBar…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00386 Published 2023-11-30 No fix listed CWE-79

TI-2023-25875 CVE-2023-47765 · GHSA-9946-pc9p-g3rf

Cross-site request forgery in CodeBard's Patron Button and Widgets for Patreon

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2.1.9 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-11-22 No fix listed CWE-352

TI-2023-25695 CVE-2023-47524 · GHSA-6x5j-fcrv-2xcj

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability (requires PHP 8.x) in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2.1.9 versions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00358 Published 2023-11-14 No fix listed CWE-79

TI-2023-14327 CVE-2023-30491 · GHSA-3m7c-w3gg-8897

WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2.1.8 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-05 No fix listed CWE-79

Vulnerabilities

Filters