Login Request a demo
AY
Vendor
Ayecode
13 products with CVEs on record
26
CVEs
0
On KEV
0
New 30D
Products
GE
Geodirectory
Ayecode
8.8
9 CVEs0 on KEV0 new
US
Userswp
Ayecode
9.8
5 CVEs0 on KEV0 new
GE
Getpaid
Ayecode
8.8
2 CVEs0 on KEV0 new
AK
Api Key For Google Maps
Ayecode
4.3
1 CVEs0 on KEV0 new
CB
Cafe Bistro
Ayecode
6.1
1 CVEs0 on KEV0 new
CO
College
Ayecode
6.1
1 CVEs0 on KEV0 new
DI
Directory
Ayecode
6.1
1 CVEs0 on KEV0 new
KS
Ketchup Shortcodes
Ayecode
5.4
1 CVEs0 on KEV0 new
LM
Location Manager
Ayecode
9.8
1 CVEs0 on KEV0 new
PL
Plato
Ayecode
6.1
1 CVEs0 on KEV0 new
RP
Restaurant PT
Ayecode
6.1
1 CVEs0 on KEV0 new
RE
Restaurante
ayecode
7.1
1 CVEs0 on KEV0 new
WB
Wedding Bride
Ayecode
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-52746
RE
Restaurante
ayecode
7.1
0%
Jan 22WordPress Restaurante theme <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-6200
GE
Geodirectory
Ayecode
5.9
0%
Jul 11GeoDirectory < 2.8.120 - Contributor+ Stored XSS
CVE-2024-13590
KS
Ketchup Shortcodes
Ayecode
5.4
0%
Jan 22The Ketchup Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spacer' shortcode in all versions up to, and including, 0.1.2 due to…
CVE-2024-56259
GE
Geodirectory
Ayecode
5.4
0%
Jan 2WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43981
GE
Geodirectory
Ayecode
8.8
0%
Nov 1Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2024-43973
GE
Getpaid
Ayecode
8.8
0%
Nov 1Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a…
CVE-2024-50437
GE
Geodirectory
Ayecode
5.4
0%
Oct 28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects…
CVE-2024-43145
GE
Geodirectory
Ayecode
8.8
0%
Aug 18Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory.This issue affects GeoDirectory: from n/a through…
CVE-2024-6477
US
Userswp
Ayecode
7.5
1%
Aug 3The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve…
CVE-2024-6265
US
Userswp
Ayecode
9.8
2%
Jun 29The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the…
CVE-2024-3732
GE
Geodirectory
Ayecode
5.4
0%
Apr 23The GeoDirectory – WordPress Business Directory Plugin, or Classified Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gd_single_tabs'…
CVE-2024-2423
US
Userswp
Ayecode
6.4
0%
Apr 9The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2023-50845
GE
Geodirectory
Ayecode
7.2
1%
Dec 28Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode - WordPress Business Directory Plugins GeoDirectory – WordPress…
CVE-2022-47442
US
Userswp
Ayecode
8.8
1%
Nov 7Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9
CVE-2023-2813
CB
Cafe Bistro
Ayecode
6.1
1%
Sep 4All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast…
CVE-2022-4775
GE
Geodirectory
Ayecode
5.4
0%
Jan 23The GeoDirectory WordPress plugin before 2.2.22 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with…
CVE-2022-29453
AK
Api Key For Google Maps
Ayecode
4.3
0%
Jun 15Cross-Site Request Forgery (CSRF) vulnerability in API KEY for Google Maps plugin <= 1.2.1 at WordPress leading to Google Maps API key update
CVE-2022-0442
US
Userswp
Ayecode
4.3
1%
Mar 7The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a…
CVE-2021-24720
GE
Geodirectory
Ayecode
5.4
1%
Oct 11The GeoDirectory Business Directory WordPress plugin before 2.1.1.3 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS)
CVE-2021-24369
GE
Getpaid
Ayecode
5.4
1%
Jun 21In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not…
CVE-2021-24361
LM
Location Manager
Ayecode
9.8
2%
Jun 21In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are…