CO
Vendor
Codection
20
CVEs
0
On KEV
2
New 30D
Products
IA8.0
Import and export users and customers
Codection
9 CVEs0 on KEV1 new
PR5.3
Products Restricted Users for WooCommerce
Codection
1 CVEs0 on KEV1 new
IU8.8
Import Users From Csv With Meta
Codection
6 CVEs0 on KEV0 new
CL8.8
Clean Login
Codection
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54862 New | IA Import and export users and customers Codection | 6.5 | Oct 29 | WordPress Import and export users and customers plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-107863 | PR Products Restricted Users for WooCommerce Codection | 5.3 | Oct 12 | WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerability |
| CVE-2024-8252 | CL Clean Login Codection | 8.8 | Aug 30 | Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion |
| CVE-2024-38787 | IA Import And Export Users And Customers Codection | 7.5 | Aug 13 | WordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability |
| CVE-2024-22151 | IA Import and export users and customers Codection | 5.3 | Jun 8 | WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability |
| CVE-2024-4734 | IA Import And Export Users And Customers Codection | 4.4 | May 15 | Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2023-6583 | IA Import And Export Users And Customers Codection | 7.2 | Jan 11 | Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality |
| CVE-2023-6624 | IA Import And Export Users And Customers Codection | 5.4 | Jan 11 | Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode |
| CVE-2022-4838 | CL Clean Login Codection | 5.4 | Feb 6 | The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with… |
| CVE-2022-3558 | IA Import And Export Users And Customers Codection | 8.0 | Nov 7 | The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files |
| CVE-2022-1255 | IA Import And Export Users And Customers Codection | 4.8 | May 2 | The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import… |
| CVE-2020-22277 | IA Import And Export Users And Customers Codection | 8.0 | Nov 4 | Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile |
| CVE-2019-15329 | IU Import Users From Csv With Meta Codection | 8.8 | Aug 22 | The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF |
| CVE-2019-15328 | IU Import Users From Csv With Meta Codection | 6.1 | Aug 22 | The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS |
| CVE-2019-15327 | IU Import Users From Csv With Meta Codection | 6.1 | Aug 22 | The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data |
| CVE-2019-15326 | IU Import Users From Csv With Meta Codection | 7.5 | Aug 22 | The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal |
| CVE-2015-9336 | CL Clean Login Codection | 6.1 | Aug 22 | The clean-login plugin before 1.5.1 for WordPress has reflected XSS |
| CVE-2019-14683 | IU Import Users From Csv With Meta Codection | 5.7 | Aug 8 | The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF |
| CVE-2018-20101 | IU Import Users From Csv With Meta Codection | 6.1 | Dec 12 | The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell |
| CVE-2017-8875 | CL Clean Login Codection | 6.5 | May 10 | CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL |