Codexonics vulnerabilities
We track 2 vulnerabilities in Codexonics products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 24, 2026.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Codexonics vulnerabilities
- 9.8 Critical severity
Prime Mover – Backup and Migration: Deserialization of Untrusted Data
The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace routine (recursiveUnserializeReplace()). An
- 7.2 High severity
Prime Mover: Improper Limitation of a Pathname to a Restricted Directory
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP