CVE Intelligence

Codetipi vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Codetipi products: 2 record(s), with severity, exploitation and fixes.

Valenti 1Valenti Engine 1

Exploited only (KEV) →

CVE-2026-23544 High · 8.8 CWE-502 Feb 19, 2026
WordPress Valenti theme <= 5.6.3.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection.This issue affects Valenti: from n/a through <= 5.6.3.5.
CVE-2025-63021 Medium · 6.5 CWE-79 Dec 31, 2025
WordPress Valenti Engine plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codetipi Valenti Engine valenti-engine allows DOM-Based XSS.This issue affects Valenti Engine: from n/a through <= 1.0.3.