Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

webcodingplace — Vulnerabilities & Security Advisories 22

Browse all 22 CVE security advisories affecting webcodingplace. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Webcodingplace develops web applications and frameworks for enterprise clients, with a core focus on custom content management and e-commerce solutions. Historically, the organization has been associated with multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues across its product lines. Security assessments reveal consistent weaknesses in input validation and session management. While no major public security incidents have been documented, the 19 CVEs on record indicate a pattern of security oversights in their development lifecycle, particularly in their web application frameworks and third-party integrations.

CVE ID Title CVSS Severity Published
CVE-2026-15142 Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision — Real Estate Manager Pro CWE-269 7.5 High 2026-08-15
CVE-2026-57701 WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability — Real Estate Manager Pro CWE-79 7.1 High 2026-07-23
CVE-2026-57398 WordPress Real Estate Manager Pro plugin <= 12.8.3 - Cross Site Scripting (XSS) vulnerability — Real Estate Manager Pro CWE-79 7.1 High 2026-07-13
CVE-2026-27361 WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability — Responsive Posts Carousel Pro CWE-862 7.5 High 2026-03-05
CVE-2026-27354 WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability — WooCommerce Coming Soon Product with Countdown CWE-79 6.5 Medium 2026-03-05
CVE-2025-68552 WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Local File Inclusion vulnerability — WooCommerce Coming Soon Product with Countdown CWE-98 7.5 High 2026-02-20
CVE-2025-68996 WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability — Responsive Posts Carousel Pro CWE-98 7.5 High 2025-12-30
CVE-2025-68548 WordPress Responsive Posts Carousel Pro plugin <= 15.2 - Cross Site Scripting (XSS) vulnerability — Responsive Posts Carousel Pro CWE-79 6.5 Medium 2025-12-23
CVE-2025-67562 WordPress Image Caption Hover Pro plugin < 20.0 - Broken Access Control vulnerability — Image Caption Hover Pro CWE-862 5.4 Medium 2025-12-09
CVE-2025-9874 Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion — Ultimate Classified Listings CWE-98 7.5 High 2025-09-11
CVE-2025-0763 Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update — Ultimate Classified Listings CWE-862 4.3 Medium 2025-09-11
CVE-2025-54032 WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability — Real Estate Manager Pro CWE-79 7.1 High 2025-08-20
CVE-2025-52728 WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability — Responsive Posts Carousel Pro CWE-98 7.5 High 2025-08-14
CVE-2024-13753 Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover — Ultimate Classified Listings CWE-352 8.1 High 2025-02-20
CVE-2024-13748 Ultimate Classified Listings <= 1.4 Authenticated (Administrator+) Stored Cross-Site Scripting via Title Parameter — Ultimate Classified Listings CWE-79 4.4 Medium 2025-02-20
CVE-2024-56286 WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerability — Classic Addons – WPBakery Page Builder CWE-22 7.5 High 2025-01-07
CVE-2024-11952 Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion — Classic Addons – WPBakery Page Builder CWE-22 7.5 High 2024-12-04
CVE-2024-52487 WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability — Ultimate Classified Listings CWE-79 6.5 Medium 2024-12-02
CVE-2024-52448 WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability — Ultimate Classified Listings CWE-22 7.5 High 2024-11-20
CVE-2024-43953 WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability — Classic Addons – WPBakery Page Builder CWE-79 6.5 Medium 2024-08-29
CVE-2023-52179 WordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerability — Product Expiry for WooCommerce CWE-862 5.4 Medium 2024-06-11
CVE-2024-0201 Product Expiry for WooCommerce <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update — Product Expiry for WooCommerce CWE-862 5.4 Medium 2024-01-03

This page lists every published CVE security advisory associated with webcodingplace. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.