Codemstory

9 CVEs across 4 Codemstory products. Browse Codemstory vulnerabilities, severities, and proof-of-concept exploits.

Codemstory products with known CVEs

ProductCVEs
워드프레스 결제 심플페이3
코드엠샵 소셜톡3
워드프레스 결제 심플페이 – 우커머스 결제 플러그인2
우커머스 네이버페이1
Codemstory CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-56036Critical9.32026-06-26Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions.
CVE-2025-58828Medium6.52025-09-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codemstory 코드엠샵 소셜톡 mshop-naver-talktalk allows Stored XS…
CVE-2025-47661Medium5.42025-05-07Cross-Site Request Forgery (CSRF) vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Cross Site Request Forgery.This issue affects 워드프레스 결제…
CVE-2024-56281High7.52025-01-07Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woo…
CVE-2024-11943Medium6.12024-12-07The 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg() function without approp…
CVE-2024-11904Medium6.42024-12-07The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msntt_add_plus_talk' shortcode in all versions up to, and incl…
CVE-2024-11231Medium6.42024-11-23The 우커머스 네이버페이 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mnp_purchase shortcode in all versions up to, and including…
CVE-2024-11229Medium6.42024-11-23The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's add_plus_friends and add_plus_talk shortcodes in all versions u…
CVE-2024-11228Medium6.42024-11-23The 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pafw_instant_payment shortcode in all versi…