Code Explorer

Code Explorer has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 4.9 out of 10.

The most common weakness is External Control Of File Name Or Path, behind 1 of the records (50%). Other recurring categories include Path Traversal.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each.

01234567891029.10.2024Today29.10.20244.9Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading CVSS 4.9 · 29.10.202403.02.20264.9Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter CVSS 4.9 · 03.02.2026

Strategic Overview

Avg CVSSMedium
4.9/ 10
Patch Coverage50%
Open

1

Fixed

1

Get automatic notifications for all Code Explorer vulnerabilities before they are exploited.

Most severe open issueCVSS 4.9CVE-2025-15487

Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter

Read the full analysis

Vulnerability Records

2 records
Showing 1–2 of 2 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C