CodeCanyon

Products

ProductCVEsExploitedLatest
Perfex CRM4–May 4, 2026
RISE Ultimate Project Manager3–Apr 22, 2025
Isshue Multi Store eCommerce Shopping Cart Solution2–Nov 16, 2025
Wholesale Inventory Control and Inventory Management System2–Nov 14, 2025
CRMGo SaaS2–Sep 20, 2024
SalesERP2–Nov 14, 2025
Mentor LMS1–Oct 5, 2025
iDentSoft1–Jul 20, 2025
Rocket LMS1–Sep 29, 2026
Credit Lite1–Aug 18, 2023
TimeCamp Integration for CRM1–Aug 17, 2026
Tiva Events Calender1–Jul 20, 2023
News3651–Nov 14, 2025

Exploited and recent CVEs

  • CVE-2026-102290 Low 3.5 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting 0.2%
  • CVE-2026-19966 Medium 5.4 CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization 0.4%
  • CVE-2026-7783 Medium 6.3 CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection 0.2%
  • CVE-2026-7782 Medium 6.3 CodeCanyon Perfex CRM Tenant Clients.php project authorization 0.2%
  • CVE-2025-13239 Medium 4.3 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow 0.3%
  • CVE-2025-13186 Low 2.4 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting 0.3%
  • CVE-2025-13185 Medium 4.7 Bdtask/CodeCanyon News365 profile unrestricted upload 0.4%
  • CVE-2025-13180 Low 3.5 Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting 0.3%
  • CVE-2025-13179 Medium 4.3 Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery 0.2%
  • CVE-2025-13178 Low 3.5 Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting 0.3%
  • CVE-2025-13177 Medium 4.3 Bdtask/CodeCanyon SalesERP cross-site request forgery 0.3%
  • CVE-2025-11304 Medium 6.3 CodeCanyon/ui-lib Mentor LMS API cross-domain policy 0.2%
  • CVE-2025-7898 Medium 4.7 Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload 0.5%
  • CVE-2025-3855 Medium 4.3 CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection 0.5%
  • CVE-2025-3219 Low 3.5 CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting 0.4%
  • CVE-2025-2974 Low 3.5 CodeCanyon Perfex CRM Contracts contract cross site scripting 0.4%
  • CVE-2024-9031 Low 3.5 CodeCanyon CRMGo SaaS show cross site scripting 0.4%
  • CVE-2024-9030 Low 3.5 CodeCanyon CRMGo SaaS note cross site scripting 0.4%
  • CVE-2024-8945 Medium 5.5 CodeCanyon RISE Ultimate Project Manager save sql injection 16.0%
  • CVE-2024-0545 Medium 5.3 CodeCanyon RISE Ultimate Project Manager signin redirect 0.5%
  • CVE-2023-4407 Medium 6.3 Codecanyon Credit Lite POST Request account_statement sql injection 2.0%
  • CVE-2023-3787 Low 3.5 Codecanyon Tiva Events Calender cross site scripting 0.6%