Codexpert Inc
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CoSchool LMS | 3 | – | Nov 6, 2025 |
| CoDesigner | 2 | – | Sep 22, 2025 |
| ThumbPress | 2 | – | Aug 18, 2026 |
| CF7 Submissions | 1 | – | Sep 22, 2025 |
| Restrict Elementor Widgets, Columns and Sections | 1 | – | Dec 16, 2025 |
| WC Affiliate | 1 | – | May 23, 2025 |
Exploited and recent CVEs
- CVE-2026-32549 WordPress ThumbPress plugin < 6.5 - Broken Access Control vulnerability 0.4%
- CVE-2026-57720 WordPress ThumbPress plugin <= 6.3.2 - Broken Access Control vulnerability 0.3%
- CVE-2025-64244 WordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerability 0.2%
- CVE-2025-60239 WordPress CoSchool LMS plugin <= 1.4.3 - SQL Injection vulnerability 0.3%
- CVE-2025-57961 WordPress CoDesigner plugin <= 4.29 - Broken Access Control vulnerability 0.4%
- CVE-2025-58016 WordPress CF7 Submissions Plugin <= 0.26 - Broken Access Control Vulnerability 0.2%
- CVE-2025-30973 WordPress CoSchool LMS plugin <= 1.4.3 - PHP Object Injection Vulnerability 0.6%
- CVE-2025-47660 WordPress WC Affiliate plugin <= 2.16 - PHP Object Injection vulnerability 0.5%
- CVE-2025-22788 WordPress CoDesigner plugin <= 4.29 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-54296 WordPress CoSchool LMS plugin <= 1.4.3 - Account Takeover vulnerability 0.8%