Skip to content
OpenAdvisories

Vendor

coffee2code

11 known vulnerabilities.

coffee2code at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Obfuscate Email 1 Add Admin CSS 1 Reveal Template 1 Admin Trim Interface 1 Custom Post Limits 1 Admin Post Navigation 1 Linkify Text 1 Add Admin JavaScript 1 Remember Me Controls 1 No Update Nag 1 One Click Close Comments 1
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Medium 5.3
    CVE-2024-6544

    Custom Post Limits <= 4.4.1 - Unauthenticated Full Path Disclosure

    The Custom Post Limits plugin for WordPress is vulnerable to full path disclosure in all versions up to, and including, 4.4.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthentica…

    coffee2code Custom Post Limits Web / CMS
  • Medium 5.3
    CVE-2024-7415

    Remember Me Controls <= 2.0.1 - Unauthenticated Full Path Disclosure

    The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin allowing direct access to the bootstrap.php file which has display_errors on. This makes it possible for…

    coffee2code Remember Me Controls Web / CMS
  • Medium 5.3
    CVE-2024-7416

    Reveal Template <= 3.7 - Unauthenticated Full Path Disclosure

    The Reveal Template plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.7. This is due to the plugin allowing direct access to the bootstrap.php file which has display_errors on. This makes it possible for unauth…

    coffee2code Reveal Template Web / CMS
  • Medium 5.3
    CVE-2024-7412

    No Update Nag <= 1.4.12 - Unauthenticated Full Path Disclosure

    The No Update Nag plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.12. This is due to the plugin allowing direct access to the bootstrap.php file which has display_errors on. This makes it possible for unaut…

    coffee2code No Update Nag Web / CMS
  • Medium 5.3
    CVE-2024-7413

    Obfuscate Email <= 3.8.1 - Unauthenticated Full Path Disclosure

    The Obfuscate Email plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.8.1. This is due to the plugin allowing direct access to the bootstrap.php file which has display_errors on. This makes it possible for unau…

    coffee2code Obfuscate Email Web / CMS
  • Medium 5.3
    CVE-2024-7382

    Linkify Text <= 1.9.1 - Unauthenticated Full Path Disclosure

    The Linkify Text plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.9.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated at…

    coffee2code Linkify Text Web / CMS
  • Medium 5.3
    CVE-2024-6546

    One Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosure

    The One Click Close Comments plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.7.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauth…

    coffee2code One Click Close Comments Web / CMS
  • Medium 5.3
    CVE-2024-6549

    Admin Post Navigation <= 2.1 - Unauthenticated Full Path Disclosure

    The Admin Post Navigation plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthentic…

    coffee2code Admin Post Navigation Web / CMS
  • Medium 5.3
    CVE-2024-6545

    Admin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosure

    The Admin Trim Interface plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.5.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenti…

    coffee2code Admin Trim Interface Web / CMS
  • Medium 5.3
    CVE-2024-6548

    Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure

    The Add Admin JavaScript plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthentica…

    coffee2code Add Admin JavaScript Web / CMS
  • Medium 5.3
    CVE-2024-6547

    Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure

    The Add Admin CSS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated a…

    coffee2code Add Admin CSS Web / CMS