CodeCanyon
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Perfex CRM | 4 | – | May 4, 2026 |
| RISE Ultimate Project Manager | 3 | – | Apr 22, 2025 |
| Isshue Multi Store eCommerce Shopping Cart Solution | 2 | – | Nov 16, 2025 |
| Wholesale Inventory Control and Inventory Management System | 2 | – | Nov 14, 2025 |
| CRMGo SaaS | 2 | – | Sep 20, 2024 |
| SalesERP | 2 | – | Nov 14, 2025 |
| Mentor LMS | 1 | – | Oct 5, 2025 |
| iDentSoft | 1 | – | Jul 20, 2025 |
| Rocket LMS | 1 | – | Sep 29, 2026 |
| Credit Lite | 1 | – | Aug 18, 2023 |
| TimeCamp Integration for CRM | 1 | – | Aug 17, 2026 |
| Tiva Events Calender | 1 | – | Jul 20, 2023 |
| News365 | 1 | – | Nov 14, 2025 |
Exploited and recent CVEs
- CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting 0.2%
- CVE-2026-19966 CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization 0.4%
- CVE-2026-7783 CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection 0.2%
- CVE-2026-7782 CodeCanyon Perfex CRM Tenant Clients.php project authorization 0.2%
- CVE-2025-13239 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow 0.3%
- CVE-2025-13186 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting 0.3%
- CVE-2025-13185 Bdtask/CodeCanyon News365 profile unrestricted upload 0.4%
- CVE-2025-13180 Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting 0.3%
- CVE-2025-13179 Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery 0.2%
- CVE-2025-13178 Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting 0.3%
- CVE-2025-13177 Bdtask/CodeCanyon SalesERP cross-site request forgery 0.3%
- CVE-2025-11304 CodeCanyon/ui-lib Mentor LMS API cross-domain policy 0.2%
- CVE-2025-7898 Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload 0.5%
- CVE-2025-3855 CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection 0.5%
- CVE-2025-3219 CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting 0.4%
- CVE-2025-2974 CodeCanyon Perfex CRM Contracts contract cross site scripting 0.4%
- CVE-2024-9031 CodeCanyon CRMGo SaaS show cross site scripting 0.4%
- CVE-2024-9030 CodeCanyon CRMGo SaaS note cross site scripting 0.4%
- CVE-2024-8945 CodeCanyon RISE Ultimate Project Manager save sql injection 16.0%
- CVE-2024-0545 CodeCanyon RISE Ultimate Project Manager signin redirect 0.5%
- CVE-2023-4407 Codecanyon Credit Lite POST Request account_statement sql injection 2.0%
- CVE-2023-3787 Codecanyon Tiva Events Calender cross site scripting 0.6%