AyeCode Connect
AyeCode Connect has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for AyeCode Connect has a vendor fix available, so running the current release closes it.
All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). AyeCode Connect is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-56255AyeCode Connect <= 1.3.8 - Missing Authorization
Read the full analysisVulnerability Records

AyeCode Connect
Author
Stiofan
To take full advantage of this plugin you should have one of our plugins installed. GeoDirectory | UsersWP | GetPaid | BlockStrap AyeCode Connect is a service plugin, meaning that it will have no functionality until you connect your site to ours. This link allows us to provide extra services to your site such as live documentation search and submission of support tickets. After connecting your site you can install our update plugin which will give you the ability to automatically sync license keys of purchases and also be able to remotely install and update purchased products. You will be able to remotely manage your activated sites and licences all from your account area on our site. You can also use our one click demo importer. NEW: Cloudflare Turnstile Captcha feature. You can now activate Cloudflare turnstile on your site which will add a captcha to all AyeCode Ltd products ( GeoDirectory, UsersWP, GetPaid, BlockStrap ). Our implementation of Turnstile is loaded only when the field is show on the screen which helps with speed and SEO of your site. NOTE: Your site does NOT have to be using Cloudflare to be able to use Cloudflare Turnstile. Security To report a security vulnerability, please review our vulnerability disclosure policy.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C