Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_coder_–_add_custom_html,_css_and_js_code:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWp Coder – Add Custom Html, Css And Js Code (790b2d17-470a-5c28-a537-89459c823578)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2388 vulnerable 2026-06-08 05:43:35.445868 WP Coder < 2.5.3 - Code Deletion via CSRF
The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack
Published: 2022-08-22T15:02:35.000Z
Updated: 2024-08-03T00:39:06.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25053 vulnerable 2026-06-08 05:30:39.872400 WP Coder < 2.5.2 - RFI leading to RCE via CSRF
The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
Published: 2022-01-10T15:30:36.000Z
Updated: 2024-08-03T19:49:14.585Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.