Skip to content
Noroxi

Codemenschen records

3 published records for vendor codemenschen.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 23
  3. 25

Bar: total · dark part: CISA KEV.

All records

3 records
  • The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_do

    CriticalCVSS 9.8Proof of conceptEPSS 50%

    codemenschen · gift vouchersAug 30, 2018

  • The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerabilit

    CriticalCVSS 9.8Proof of conceptEPSS 42%

    codemenschen · gift vouchersMar 22, 2023

  • Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note Updates

    MediumCVSS 5.3No exploitEPSS 0%

    codemenschen · gift vouchersFeb 20, 2025