Codisto vulnerabilities
We track 2 vulnerabilities in Codisto products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Codisto vulnerabilities
- 7.1 High severity
Omnichannel for WooCommerce: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codisto Omnichannel for WooCommerce codistoconnect allows Stored XSS.This issue affects Omnichannel for WooCommerce: from n/a through <= 1.3.65.
- 7.2 High severity
Omnichannel for WooCommerce: Google, Amazon…: Improper Neutralization of Input During Web Page Generation
The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync() function in all versions up to, and including, 1.3.65 due to insufficient input sa