Skip to content
Noroxi

ayecode records

21 published records for vendor ayecode.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
47.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2024-6265
    40Plan

    UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    ayecode · userswpJun 29, 2024

  • CVE-2021-24361
    40Plan

    GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections

    CriticalCVSS 9.8No exploitEPSS 2%

    ayecode · location managerJun 21, 2021

  • CVE-2022-47442
    35Monitor

    WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection

    HighCVSS 8.8No exploitEPSS 1%

    ayecode · userswpNov 7, 2023

  • CVE-2024-43973
    35Monitor

    WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    ayecode · getpaidNov 1, 2024

  • CVE-2024-43145
    35Monitor

    WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    ayecode · geodirectoryAug 18, 2024

  • CVE-2024-43981
    35Monitor

    WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    ayecode · geodirectoryNov 1, 2024

  • CVE-2024-6477
    30Monitor

    UsersWP < 1.2.12 - Users Information Disclosure

    HighCVSS 7.5No exploitEPSS 1%

    ayecode · userswpAug 3, 2024

  • CVE-2023-50845
    28Monitor

    WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    ayecode · geodirectoryDec 28, 2023

  • CVE-2024-2423
    25Monitor

    UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 6.4No exploitEPSS 0%

    ayecode · userswpApr 9, 2024

  • CVE-2023-2813
    24Monitor

    Multiple Themes - Reflected XSS

    MediumCVSS 6.1Proof of conceptEPSS 1%

    ajaydsouza · connections reloadedSep 4, 2023

  • CVE-2025-6200
    23Monitor

    GeoDirectory < 2.8.120 - Contributor+ Stored XSS

    MediumCVSS 5.9No exploitEPSS 0%

    ayecode · geodirectoryJul 11, 2025

  • CVE-2021-24720
    21Monitor

    GeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 1%

    ayecode · geodirectoryOct 11, 2021

  • CVE-2021-24369
    21Monitor

    GetPaid < 2.3.4 - Authenticated Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    ayecode · getpaidJun 21, 2021

  • CVE-2022-4775
    21Monitor

    GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    ayecode · geodirectoryJan 23, 2023

  • CVE-2024-43277
    21Monitor

    WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    ayecode ltd · userswpNov 1, 2024

  • CVE-2024-56259
    21Monitor

    WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    ayecode · geodirectoryJan 2, 2025

  • CVE-2024-3732
    21Monitor

    GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_

    MediumCVSS 5.4No exploitEPSS 0%

    ayecode · geodirectoryApr 23, 2024

  • CVE-2024-50437
    21Monitor

    WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    ayecode · geodirectoryOct 28, 2024

  • CVE-2024-13590
    21Monitor

    Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    ayecode · ketchup shortcodesJan 22, 2025

  • CVE-2022-0442
    17Monitor

    UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override

    MediumCVSS 4.3No exploitEPSS 1%

    ayecode · userswpMar 7, 2022

  • CVE-2022-29453
    17Monitor

    WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

    MediumCVSS 4.3No exploitEPSS 0%

    ayecode · api key for google mapsJun 15, 2022