Log in Start free

codesupplyco

Products

ProductCVEsExploitedLatest
Powerkit – Supercharge your WordPress Site5–Sep 7, 2026
Advanced Popups2–Sep 16, 2026
Networker1–Jun 27, 2025
Networker - Tech News WordPress Theme with Dark Mode1–Mar 27, 2024
Powerkit1–Aug 6, 2026
Sight – Professional Image Gallery and Portfolio1–Sep 26, 2024
Absolute Reviews1–Jul 12, 2023
Uppercase1–Jun 17, 2026
Canvas1–Jun 13, 2026

Exploited and recent CVEs

  • CVE-2026-11996 Medium 6.4 Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field 0.3%
  • CVE-2026-2390 Medium 6.4 Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing 0.3%
  • CVE-2026-28178 Medium 6.5 WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-15644 Medium 6.4 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute 0.4%
  • CVE-2026-15649 Medium 6.4 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
  • CVE-2026-15645 Medium 6.4 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute 0.4%
  • CVE-2026-39559 High 8.1 WordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability 0.3%
  • CVE-2026-9629 Medium 6.4 Canvas <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Block Attribute 0.2%
  • CVE-2025-52723 High 8.1 WordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability 0.6%
  • CVE-2024-9025 Medium 5.3 Sight – Professional Image Gallery and Portfolio <= 1.1.2 - Missing Authorization to Sensitive Information Exposure in handler_post_title 0.4%
  • CVE-2024-2458 Medium 6.4 Powerkit – Supercharge your WordPress Site <= 2.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2024-2962 Medium 5.3 Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization 0.5%
  • CVE-2021-4426 Medium 4.3 Absolute Reviews <= 1.0.8 - Cross-Site Request Forgery Bypass 0.6%
  • CVE-2021-4421 Medium 4.3 Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass 0.4%