Browse all 3 CVE security advisories affecting NextCode. AI-powered Chinese analysis, POCs, and references for each vulnerability.
NextCode develops genomic analysis software for healthcare and research organizations. Historically, the organization's products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. While no major public security incidents have been documented, the three CVEs assigned to NextCode highlight persistent weaknesses in their web interfaces and API endpoints. The company's security posture appears typical for specialized scientific software vendors, with vulnerabilities primarily affecting authenticated users rather than exposing systems to widespread internet attacks.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2022-29439 | WordPress Image Slider by NextCode plugin <= 1.1.2 - Slider Deletion via Cross-Site Request Forgery (CSRF) vulnerability — Image Slider by NextCode – Photo & Video SLider (WordPress plugin)CWE-352 | 5.4 | Medium | 2022-06-15 |
| CVE-2022-29438 | WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability — Image Slider by NextCode – Photo & Video SLider (WordPress plugin)CWE-79 | 4.8 | Medium | 2022-06-15 |
| CVE-2022-29437 | WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities — Image Slider by NextCode – Photo & Video SLider (WordPress plugin)CWE-352 | 5.4 | Medium | 2022-06-15 |
This page lists every published CVE security advisory associated with NextCode. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.