Filter

Ketchup ShortcodesKetchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

First published (updated )

AyeCode ConnectWordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerability

First published (updated )

Ayecode GetpaidWordPress Payment forms, Buy now buttons and Invoicing System plugin <= 2.8.11 - Broken Access Control vulnerability

8.8
First published (updated )

AyeCode GeoDirectoryWordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability

8.8
First published (updated )

AyeCode UsersWPUsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by'

EPSS
0.06%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

AyeCode GeoDirectoryWordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection

7.6
First published (updated )

AyeCode UsersWPWordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection

8.8
First published (updated )

Ajaydsouza Connections ReloadedMultiple Themes - Reflected XSS

First published (updated )

AyeCode GeoDirectoryGeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode

First published (updated )

Ayecode Api Key For Google MapsWordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

AyeCode UsersWPUsersWP < 1.2.3.1 - Subscriber+ User Avatar Override

First published (updated )

AyeCode GeoDirectoryGeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS)

First published (updated )

Ayecode GetpaidGetPaid < 2.3.4 - Authenticated Stored XSS

First published (updated )

Ayecode Location ManagerGeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203