Skip to content
OpenAdvisories

Vendor

Codexpert

16 known vulnerabilities.

Products

CoSchool LMS 3 CoDesigner 2 CoDesigner – All in One Elementor WooCommerce Builder 2 ThumbPress 2 WC Affiliate – WooCommerce Affiliate Plugin 2 WC Affiliate 1 CF7 Submissions 1 ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More 1 Restrict Elementor Widgets, Columns and Sections 1 Duplica – Duplicate Posts, Pages, Custom Posts or Users 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-32549

    WordPress ThumbPress plugin < 6.5 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.

    Codexpert ThumbPress
  • High 8.5
    CVE-2025-60239

    WordPress CoSchool LMS plugin <= 1.4.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codexpert, Inc CoSchool LMS coschool allows Blind SQL Injection.This issue affects CoSchool LMS: from n/a through <= 1.4.3.

    Codexpert CoSchool LMS
  • High 8.8
    CVE-2025-47660

    WordPress WC Affiliate plugin <= 2.16 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate wc-affiliate allows Object Injection.This issue affects WC Affiliate: from n/a through <= 2.16.

    Codexpert WC Affiliate