Vulnerabilities in AyeCode Ltd
11 resultsCVE-2021-24361—GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL InjectionsEPSS 1.8%CVE-2022-47442MEDIUMWordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV InjectionEPSS 0.7%CVE-2021-24369—GetPaid < 2.3.4 - Authenticated Stored XSSEPSS 0.6%CVE-2026-85705HIGHLocation Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API ParametersEPSS 0.5%CVE-2022-29453MEDIUMWordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key updateEPSS 0.4%CVE-2024-43145HIGHWordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-43277MEDIUMWordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-119749HIGHGetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment BypassEPSS 0.4%CVE-2026-119748MEDIUMGetPaid WordPress Plugin < 2.8.63 Authorization Bypass via maybe_use_invoiceEPSS 0.2%CVE-2026-119747HIGHGetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST APIEPSS 0.2%CVE-2024-31936MEDIUMWordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%