Codection vulnerabilities
We track 2 vulnerabilities in Codection products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 30, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Codection vulnerabilities
- 8.8 High severity
Clean Login: Inclusion of Functionality from Untrusted Control Sphere
The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5 via the 'template' attribute of the clean-login-register shortcode. This makes it possible for authenticated attackers, with Contributor-lev
- 7.5 High severity
Import and export users and customers: Insertion of Sensitive Information Into Sent Data
Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through <= 1.26.8.