Codexonics

Products

ProductCVEsExploitedLatest
Prime Mover3–Oct 1, 2026
Prime Mover – Backup and Migration1–Oct 24, 2026

Exploited and recent CVEs

  • CVE-2026-115806 Critical 9.8 Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace 0.5%
  • CVE-2026-101890 Medium 5.4 Prime Mover < 2.2.1 Stored XSS via Package Metadata 0.2%
  • CVE-2026-101889 Medium 6.5 Prime Mover < 2.2.1 Path Traversal via wprime-config.json 0.3%
  • CVE-2026-101888 High 7.2 Prime Mover < 2.2.1 Zip Slip Path Traversal File Write 0.6%