Vendor

    Codection

    18 known vulnerabilities in products by Codection, 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Codection
    HighCVE-2024-8252

    Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion

    		8.8
    HighCVE-2019-15326

    Codection Download Import Users from CSV with Meta: Path Traversal

    		7.5
    HighCVE-2020-22277

    Codection Import and export users and customers: security vulnerability

    		8.0
    HighCVE-2022-3558

    Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection

    		8.0
    HighCVE-2019-15329

    Codection Download Import Users from CSV with Meta: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2023-6583

    Carazo Import and export users and customers: PHP Remote File Inclusion

    also in 1 other product

    		6.6
    MediumCVE-2026-54862

    Codection Import and export users and customers: Cross-site Scripting

    		6.5
    MediumCVE-2019-15328

    Codection Download Import Users from CSV with Meta: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9336

    Codection Clean Login: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2019-15327

    Codection Download Import Users from CSV with Meta: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2026-107863

    Codection Products Restricted Users for WooCommerce: Missing Authorization

    		5.3
    MediumCVE-2018-20101

    Codection Download Import Users from CSV with Meta: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-8875

    Codection Clean Login: Cross-Site Request Forgery (CSRF)

    		6.5
    MediumCVE-2019-14683

    Codection Download Import Users from CSV with Meta: Cross-Site Request Forgery (CSRF)

    		5.7
    MediumCVE-2022-1255

    Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting

    		4.8
    MediumCVE-2022-4838

    Clean Login < 1.13.7 - Contributor+ Stored XSS via Shortcode

    		5.4
    MediumCVE-2024-22151

    Codection Import and export users and customers: Missing Authorization

    		5.3
    MediumCVE-2023-6624

    Carazo Import and export users and customers: Cross-site Scripting

    also in 1 other product

    		4.9

    Products

    Products by Codection
    Import and export users and customers80
    Codection Download Import Users from CSV with Meta60
    Clean Login40