AY
Vendor
Ayecode
28
CVEs
0
On KEV
0
New 30D
Products
GE8.8
Geodirectory
Ayecode
9 CVEs0 on KEV0 new
US9.8
Userswp
Ayecode
6 CVEs0 on KEV0 new
GE8.8
Getpaid
Ayecode
2 CVEs0 on KEV0 new
KS6.5
Ketchup Shortcodes
ayecode
2 CVEs0 on KEV0 new
AK4.3
Api Key For Google Maps
Ayecode
1 CVEs0 on KEV0 new
CB6.1
Cafe Bistro
Ayecode
1 CVEs0 on KEV0 new
CO6.1
College
Ayecode
1 CVEs0 on KEV0 new
DI6.1
Directory
Ayecode
1 CVEs0 on KEV0 new
LM9.8
Location Manager
Ayecode
1 CVEs0 on KEV0 new
PL6.1
Plato
Ayecode
1 CVEs0 on KEV0 new
RP6.1
Restaurant PT
Ayecode
1 CVEs0 on KEV0 new
RE7.1
Restaurante
ayecode
1 CVEs0 on KEV0 new
WB6.1
Wedding Bride
Ayecode
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-52746 | RE Restaurante ayecode | 7.1 | Jan 22 | WordPress Restaurante theme <= 3.0.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-6200 | GE Geodirectory Ayecode | 5.9 | Jul 11 | GeoDirectory < 2.8.120 - Contributor+ Stored XSS |
| CVE-2025-24673 | KS Ketchup Shortcodes AyeCode | 6.5 | Jan 24 | WordPress Ketchup Shortcodes Plugin <= 0.1.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-13590 | KS Ketchup Shortcodes ayecode | 5.4 | Jan 22 | Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-56259 | GE Geodirectory Ayecode | 5.4 | Jan 2 | WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43277 | US Userswp Ayecode | 5.3 | Nov 1 | WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability |
| CVE-2024-43973 | GE Getpaid Ayecode | 8.8 | Nov 1 | WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability |
| CVE-2024-43981 | GE Geodirectory Ayecode | 8.8 | Nov 1 | WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability |
| CVE-2024-50437 | GE Geodirectory Ayecode | 5.4 | Oct 28 | WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43145 | GE Geodirectory Ayecode | 8.8 | Aug 18 | WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability |
| CVE-2024-6477 | US Userswp Ayecode | 7.5 | Aug 3 | UsersWP < 1.2.12 - Users Information Disclosure |
| CVE-2024-6265 | US Userswp Ayecode | 9.8 | Jun 29 | UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by' |
| CVE-2024-3732 | GE Geodirectory Ayecode | 5.4 | Apr 23 | GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode |
| CVE-2024-2423 | US Userswp Ayecode | 6.4 | Apr 9 | UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-50845 | GE Geodirectory Ayecode | 7.2 | Dec 28 | WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection |
| CVE-2022-47442 | US Userswp Ayecode | 8.8 | Nov 7 | WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection |
| CVE-2023-2813 | DI Directory Ayecode | 6.1 | Sep 4 | Multiple Themes - Reflected XSS |
| CVE-2022-4775 | GE Geodirectory Ayecode | 5.4 | Jan 23 | GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode |
| CVE-2022-29453 | AK Api Key For Google Maps Ayecode | 4.3 | Jun 15 | WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update |
| CVE-2022-0442 | US Userswp Ayecode | 4.3 | Mar 7 | UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override |
| CVE-2021-24720 | GE Geodirectory Ayecode | 5.4 | Oct 11 | GeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS) |
| CVE-2021-24369 | GE Getpaid Ayecode | 5.4 | Jun 21 | GetPaid < 2.3.4 - Authenticated Stored XSS |
| CVE-2021-24361 | LM Location Manager Ayecode | 9.8 | Jun 21 | GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections |