codexpert

Products

Product	CVEs	Exploited	Latest
CoDesigner – All in One Elementor WooCommerce Builder	2	–	Jun 13, 2024
WC Affiliate – WooCommerce Affiliate Plugin	2	–	Mar 15, 2025
Duplica – Duplicate Posts, Pages, Custom Posts or Users	1	–	Jul 18, 2024
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More	1	–	Sep 22, 2026

CVE-2026-7622 Medium 4.3 ThumbPress <= 6.2.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation 0.4%
CVE-2024-12336 Medium 6.5 WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-all 0.4%
CVE-2024-12334 Medium 6.1 WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting 0.3%
CVE-2024-5997 Medium 4.3 Duplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation 0.4%
CVE-2024-4371 Critical 9.0 CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Unauthenticated PHP Object Injection 0.7%
CVE-2024-4564 Medium 6.4 CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.4%