AyeCode Ltd

AyeCode Ltd is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #514 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2021, with 7 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (25%). Other recurring categories include Improper Authentication, Authentication Bypass Using An Alternate Path Or Channel. The average CVSS score across these disclosures is 8.1, peaking at 9.8. Severity breakdown: 3 critical and 3 high.

The most affected software includes Pie Register (3), RegistrationMagic (2), WP User Manager (2), across 4 distinct plugins, themes and core versions in total.

All 8 disclosed issues have since received a vendor fix. The most severe finding, "RegistrationMagic <= 5.0.1.7 - Authentication Bypass", scores 9.8 out of 10.

20212022

Critical

High

Medium

Low

Global Rank

#514

of 3,515 researchers

Vulns

Critical3

High3

Medium2

Low0

Affected Assets

4plugins

Avg CVSS

8.1

Average score of vulnerabilities

Researcher Submissions

8 records


2022-10-31 00:00	WP User Frontend <= 3.5.28 - Privilege Escalation User Frontend <= 3.5.28	`CVE-2021-24649`	8.1 High	AyeCode Ltd	Yes
2021-12-28 00:00	Registration Magic <= 5.0.1.8 - Reflected Cross-Site Scripting RegistrationMagic <= 5.0.1.8	`CVE-2021-24648`	6.1 Medium	AyeCode Ltd	Yes
2021-12-08 00:00	RegistrationMagic <= 5.0.1.7 - Authentication Bypass RegistrationMagic <= 5.0.1.7	`CVE-2021-4073`	9.8 Critical	Marco Wotschka	Yes
2021-10-11 00:00	Pie Register <= 3.7.1.5 - Authentication Bypass Pie Register < 3.7.1.6	`CVE-2021-24647`	8.1 High	AyeCode Ltd	Yes
2021-10-11 00:00	Pie Register <= 3.7.1.4 - Authentication Bypass Pie Register <= 3.7.1.4	`CVE-2025-34077`	9.8 Critical	AyeCode Ltd	Yes
2021-10-11 00:00	Pie Register <= 3.7.1.5 - Unauthenticated SQL Injection Pie Register < 3.7.1.6	`CVE-2021-24731`	9.8 Critical	AyeCode Ltd	Yes
2021-09-22 00:00	WP User Manager <= 2.6.2 - Arbitrary User Password Reset WP User Manager <= 2.6.2	`CVE-2021-24655`	7.5 High	AyeCode Ltd	Yes
2021-09-06 00:00	User Registration < 2.0.2 - Authenticated Stored Cross-Site Scripting WP User Manager < 2.0.2	`CVE-2021-24654`	5.4 Medium	AyeCode Ltd	Yes

Showing 1–8 of 8 reports