htplugins Insert Headers and Footers Code – HT Script vulnerabilities (CVE)

CVE records published for htplugins Insert Headers and Footers Code – HT Script, newest first. Follow to get an email when a new one appears.

2 results

6.4Medium

CVE-2025-12112 1 year ago

Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scripting

htplugins Insert Headers and Footers Code – HT Script

The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adding scripts in all versions up to, and including, 1.1.6 due to insufficient capability checks. This makes it possible for authenticated at…

6.5Medium

CVE-2025-2779 1 year ago

Insert Headers and Footers Code – HT Script <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

htplugins Insert Headers and Footers Code – HT Script

The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 1.1.2. This makes it possible for auth…