CodeVibrant vulnerabilities
We track 3 vulnerabilities in CodeVibrant products across 5 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2025.
Latest CodeVibrant vulnerabilities
- 8.8 High severity
Maintenance Notice: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in CodeVibrant Maintenance Notice maintenance-notice allows Cross Site Request Forgery.This issue affects Maintenance Notice: from n/a through <= 1.0.6.
- 8.8 High severity
WP Blog Post Layouts: Improper Control of Filename for Include/Require Statement in PHP Program
The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP f
- 7.5 High severity
WP Magazine Modules Lite: Improper Control of Filename for Include/Require Statement in PHP Program
The WP Magazine Modules Lite plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.2 via the 'blockLayout' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to