Skip to content
OpenAdvisories

Vendor

codesolz

12 known vulnerabilities.

Products

Ultimate Push Notifications 3 Better Find and Replace – AI-Powered Suggestions 3 Better Find and Replace 3 Bitcoin / AltCoin Payment Gateway for WooCommerce 2 Easy Ad Manager 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-3369

    Better Find and Replace – AI-Powered Suggestions <= 1.7.9 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Title

    The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded image title in versions up to, and including, 1.7.9 due to insufficient input sanitization and output escaping. This makes it p…

    codesolz Better Find and Replace – AI-Powered Suggestions Web / CMS
  • Medium 4.3
    CVE-2025-12360

    Better Find and Replace <= 1.7.7 - Missing Authorization

    The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafar_ajax() function in all versions up to, and including, 1.7.7. This makes it possible for authentic…

    codesolz Better Find and Replace – AI-Powered Suggestions Web / CMS
  • Medium 5.9
    CVE-2025-53466

    WordPress Better Find and Replace Plugin <= 1.7.6 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeSolz Better Find and Replace real-time-auto-find-and-replace allows Stored XSS.This issue affects Better Find and Replace: from n/a through <= 1.7.6.

    codesolz Better Find and Replace
  • Medium 6.5
    CVE-2025-50028

    WordPress Ultimate Push Notifications plugin <= 1.2.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in CodeSolz Ultimate Push Notifications ultimate-push-notifications allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Push Notifications: from n/a through <= 1.2.0.

    codesolz Ultimate Push Notifications
  • Medium 5.9
    CVE-2023-25460

    WordPress Easy Ad Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodeSolz Easy Ad Manager plugin <= 1.0.0 versions.

    codesolz Easy Ad Manager