Advisories · Technology

wpcodefactory Download Plugins and Themes in ZIP from Dashboard.

Every CVE that names wpcodefactory Download Plugins and Themes in ZIP from Dashboard among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-14399 CVE record

CVSS 4.3 Medium

Download Plugins and Themes from Dashboard <= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival
- wpcodefactory Download Plugins and Themes in ZIP from Dashboard
- Cross-site request forgery (CSRF)
Not analysed yet 17 Dec 2025
CVE-2024-9232 CVE record

CVSS 6.1 Medium

Download Plugins and Themes in ZIP from Dashboard <= 1.9.1 - Reflected Cross-Site Scripting
- wpcodefactory Download Plugins and Themes in ZIP from Dashboard
- Cross-site scripting (XSS)
Not analysed yet 11 Oct 2024
CVE-2024-7501 CVE record

CVSS 4.2 Medium

Download Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request Forgery
- wpcodefactory Download Plugins and Themes in ZIP from Dashboard
- Cross-site request forgery (CSRF)
Not analysed yet 16 Aug 2024