Browse all 5 CVE security advisories affecting awcode. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Awcode develops enterprise software solutions with a core focus on application development and deployment platforms. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, as evidenced by their five recorded CVEs. The company's security posture has shown patterns of insufficient input validation and improper access controls in their web interfaces. While no major public security incidents have been documented, their vulnerability history suggests a need for enhanced security testing protocols, particularly in their authentication mechanisms and data handling processes.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-48238 | WordPress AWcode Toolkit plugin <= 1.0.18 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability — AWcode Toolkit CWE-352 | 7.1 | High | 2025-05-19 |
| CVE-2025-24554 | WordPress AWcode Toolkit plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability — AWcode Toolkit CWE-79 | 7.1 | High | 2025-02-14 |
| CVE-2025-24561 | WordPress ReviewsTap plugin <= 1.1.2 - CSRF to Stored Cross-Site Scripting vulnerability — ReviewsTap CWE-352 | 7.1 | High | 2025-01-24 |
| CVE-2025-23625 | WordPress Unique UX plugin <= 0.9.2 - Reflected Cross Site Scripting (XSS) vulnerability — Unique UX CWE-79 | 7.1 | High | 2025-01-22 |
| CVE-2025-23954 | WordPress Salvador – AI Image Generator plugin <= 1.0.11 - Broken Access Control vulnerability — Salvador – AI Image Generator CWE-862 | 4.3 | Medium | 2025-01-16 |
This page lists every published CVE security advisory associated with awcode. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.