Ayecode Ltd

8 CVEs across 5 Ayecode Ltd products. Browse Ayecode Ltd vulnerabilities, severities, and proof-of-concept exploits.

Ayecode Ltd products with known CVEs

ProductCVEs
Userswp3
Location Manager2
API Key For Google Maps1
Geodirectory1
WordPress Payments Plugin | Getpaid1
Ayecode Ltd CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-85705High7.52026-09-18The Location Manager plugin for WordPress is vulnerable to generic SQL Injection via 'latitude' and 'longitude' REST API Parameters in all versions up to, and…
CVE-2024-43277Medium5.32024-11-01Missing Authorization vulnerability in AyeCode Ltd UsersWP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP…
CVE-2024-43145High8.52024-08-18Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory.This issue affects GeoDirectory…
CVE-2024-31936Medium5.42024-04-11Cross-Site Request Forgery (CSRF) vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a before 1.2.6.
CVE-2022-47442Medium5.82023-11-07Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9.
CVE-2022-29453Medium5.42022-06-15Cross-Site Request Forgery (CSRF) vulnerability in API KEY for Google Maps plugin <= 1.2.1 at WordPress leading to Google Maps API key update.
CVE-2021-24369Medium5.42021-06-21In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fi…
CVE-2021-24361Critical9.82021-06-21In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST param…