Vulnerabilities in Codexpert, Inc

9 results

Vexday analysis

A Codexpert apresenta um portfólio reduzido de 8 vulnerabilidades, sendo 2 críticas, sem qualquer exploração ativa detectada até o momento. A ausência de publicações recentes e nenhuma vulnerabilidade sob ataque ativo indicam um cenário de risco controlado, embora a fraqueza dominante em autorização inadequada (CWE-862) demande atenção em futuras auditorias e patches.

CVE-2024-54296CRITICALWordPress CoSchool LMS plugin <= 1.4.3 - Account Takeover vulnerabilityEPSS 0.8%CVE-2025-30973CRITICALWordPress CoSchool LMS plugin <= 1.4.3 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-47660HIGHWordPress WC Affiliate plugin <= 2.16 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-57961MEDIUMWordPress CoDesigner plugin <= 4.29 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-32549HIGHWordPress ThumbPress plugin < 6.5 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-60239HIGHWordPress CoSchool LMS plugin <= 1.4.3 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-58016MEDIUMWordPress CF7 Submissions Plugin <= 0.26 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-22788MEDIUMWordPress CoDesigner plugin <= 4.29 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64244MEDIUMWordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerabilityEPSS 0.2%