AyeCode Connect

AyeCode Connect has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for AyeCode Connect has a vendor fix available, so running the current release closes it.

All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). AyeCode Connect is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all AyeCode Connect vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2024-56255

AyeCode Connect <= 1.3.8 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
AyeCode Connect banner
Latestv1.4.22

AyeCode Connect

Stiofan

Author

Stiofan

5.0(3)
100/100
Last Updated
2026-09-08 (5d ago)
Active Installs
10,000+
Downloads
509,437
Requires WP
6.0+
Requires PHP
7.2+
Tested up to
WP 7.1
Created
2020-02-22 (7y ago)

To take full advantage of this plugin you should have one of our plugins installed. GeoDirectory | UsersWP | GetPaid | BlockStrap AyeCode Connect is a service plugin, meaning that it will have no functionality until you connect your site to ours. This link allows us to provide extra services to your site such as live documentation search and submission of support tickets. After connecting your site you can install our update plugin which will give you the ability to automatically sync license keys of purchases and also be able to remotely install and update purchased products. You will be able to remotely manage your activated sites and licences all from your account area on our site. You can also use our one click demo importer. NEW: Cloudflare Turnstile Captcha feature. You can now activate Cloudflare turnstile on your site which will add a captcha to all AyeCode Ltd products ( GeoDirectory, UsersWP, GetPaid, BlockStrap ). Our implementation of Turnstile is loaded only when the field is show on the screen which helps with speed and SEO of your site. NOTE: Your site does NOT have to be using Cloudflare to be able to use Cloudflare Turnstile. Security To report a security vulnerability, please review our vulnerability disclosure policy.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C