smub WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager vulnerabilities (CVE)

CVE records published for smub WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager, newest first. Follow to get an email when a new one appears.

1 results

8.8High

CVE-2026-8832 5 months ago

WPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPost

smub WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager

The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a…

1.9%EPSS