codesupplyco has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.4 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 6.4
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

CWE-79 2

Products

Advanced Popups 1
Powerkit – Supercharge your WordPress Site 1

Follow codesupplyco:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

codesupplyco vulnerabilities

CVEs affecting codesupplyco, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-11996Medium· 6.4

1w ago

The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Field in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping

The Advanced Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Notification Button Link' Field in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes…

▾ Sunlitcodesupplyco · Advanced PopupsEPSS 0.21%via NVD

CVE-2026-2390Medium· 6.4

2w ago

The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4

The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. This is due to the 'content_process_images' function using a flawed r…

▾ Sunlitcodesupplyco · Powerkit – Supercharge your WordPress SiteEPSS 0.19%via NVD