c
codecanyon
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 17, 2014 to present
7
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
4.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
36/100
low
Severity Distribution
Critical
0High
1Medium
4Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
XSS
3
2
Code Injection
2
3
SQL Injection
1
4
Malicious File Upload
1
Most Affected Products
1. Codecanyon Perfex CRM3
2. Perfexcrm Perfex Crm2
3. Codecanyon Mentor LMS1
4. Codecanyon iDentSoft1
5. Ambitiousitbd Identsoft1
Recent Vulnerabilities
See more →CVE-2026-7783
CVSS 2.1EPSS 0%low
CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection
May 4, 2026🔧 No Patch
CVE-2025-11304
CVSS 7.5high
CodeCanyon/ui-lib Mentor LMS API cross-domain policy
Oct 5, 2025🔧 No Patch
CVE-2025-7898
CVSS 2.0EPSS 0%low
Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload
Jul 20, 2025🔧 No Patch
CVE-2025-3855
CVSS 5.3EPSS 0%medium
CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection
Apr 22, 2025🔧 No Patch
CVE-2025-3219
CVSS 5.4EPSS 0%medium
CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting
Apr 4, 2025🔧 No Patch
CVE-2025-2974
CVSS 5.4EPSS 0%medium
CodeCanyon Perfex CRM Contracts contract cross site scripting
Mar 31, 2025🔧 No Patch
CVE-2014-8954
CVSS 4.3medium
Nov 17, 2014🔧 No Patch
Monitor codecanyon in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.