Skip to content
OpenAdvisories

Vendor

Codexpert

16 known vulnerabilities.

Products

CoSchool LMS 3 CoDesigner 2 CoDesigner – All in One Elementor WooCommerce Builder 2 ThumbPress 2 WC Affiliate – WooCommerce Affiliate Plugin 2 WC Affiliate 1 CF7 Submissions 1 ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More 1 Restrict Elementor Widgets, Columns and Sections 1 Duplica – Duplicate Posts, Pages, Custom Posts or Users 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-7622

    ThumbPress <= 6.2.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation

    The ThumbPress plugin for WordPress is vulnerable to unauthorized access in versions up to and including 6.2.1. This is due to missing capability checks and nonce verification in the send_deactivation_survey() function registered via the wp_ajax_pl-plugin-dea…

    Codexpert ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Web / CMS
  • Medium 4.3
    CVE-2026-57720

    WordPress ThumbPress plugin <= 6.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Codexpert Inc ThumbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThumbPress: from n/a through 6.3.2.

    Codexpert ThumbPress
  • Medium 4.3
    CVE-2025-64244

    WordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Sections restrict-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict Elementor Widgets, Columns an…

    Codexpert Restrict Elementor Widgets, Columns and Sections
  • Medium 4.3
    CVE-2025-57961

    WordPress CoDesigner plugin <= 4.29 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Codexpert, Inc CoDesigner woolementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoDesigner: from n/a through <= 4.29.

    Codexpert CoDesigner
  • Medium 4.3
    CVE-2025-58016

    WordPress CF7 Submissions Plugin <= 0.26 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Codexpert, Inc CF7 Submissions cf7-submissions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CF7 Submissions: from n/a through <= 0.26.

    Codexpert CF7 Submissions
  • Medium 6.5
    CVE-2024-12336

    WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-all

    The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data' function in all versions up to, and including, 2.5.3. This makes it possibl…

    Codexpert WC Affiliate – WooCommerce Affiliate Plugin Web / CMS
  • Medium 6.1
    CVE-2024-12334

    WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting

    The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes …

    Codexpert WC Affiliate – WooCommerce Affiliate Plugin Web / CMS
  • Medium 5.9
    CVE-2025-22788

    WordPress CoDesigner plugin <= 4.29 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codexpert, Inc CoDesigner woolementor allows Stored XSS.This issue affects CoDesigner: from n/a through <= 4.29.

    Codexpert CoDesigner
  • Medium 4.3
    CVE-2024-5997

    Duplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation

    The Duplica – Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the duplicate_user and duplicate_post functions in all versions up to, and including, 0.6.…

    Codexpert Duplica – Duplicate Posts, Pages, Custom Posts or Users Web / CMS
  • Medium 6.4
    CVE-2024-4564

    CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Shop Slider, Tabs Classic, and Image Comparison widgets in all versions up t…

    Codexpert CoDesigner – All in One Elementor WooCommerce Builder Web / CMS