Codepress vulnerabilities
We track 4 vulnerabilities in Codepress products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 5, 2026.
Latest Codepress vulnerabilities
- 8.8 High severity
Admin Columns: Deserialization of Untrusted Data
The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `unserialize()` without an `allowed_classes` restriction in the `IdsToCollection::ge
- 7.5 High severity
WP Visitor Statistics (Real Time Traffic): Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 6.9.4.
- 9.8 Critical severity
WP Visitor Statistics (Real Time Traffic): Improper Neutralization of Special Elements used in an SQL Command
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks.
- 8.8 High severity
WP Visitor Statistics (Real Time Traffic): Improper Neutralization of Special Elements used in an SQL Command
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection