Header Footer Code Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:draftpress:header_footer_code_manager:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Draftpress (8356844d-d33e-5540-8d44-ccdf21a93bf5) |
|---|---|
| Product | Header Footer Code Manager (e64a2bf1-6273-58e1-8605-d8422643c7f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39989 |
vulnerable | 2026-06-08 06:09:38.246202 |
WordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin <= 1.1.34 versions.
Published: 2023-10-03T11:17:08.417Z
Updated: 2026-04-28T16:08:34.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0899 |
vulnerable | 2026-06-08 05:39:11.435054 |
Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.
Published: 2022-07-25T12:45:49.000Z
Updated: 2024-08-02T23:47:42.082Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0710 |
vulnerable | 2026-06-08 05:39:10.586775 |
Header Footer Code Manager <= 1.1.16 Reflected XSS
MEDIUM (6.1)
The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter.
Published: 2022-02-24T18:27:06.000Z
Updated: 2025-01-31T19:02:35.312Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24791 |
vulnerable | 2026-06-08 05:30:39.245804 |
Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections
The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections
Published: 2021-11-08T17:35:21.000Z
Updated: 2024-08-03T19:42:17.170Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.