Wpcode (Unknown) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-14. Vendor: Unknown.

CVEs of Wpcode

• CVE-2026-101301 - CVSS 5.3 (medium), 2026-10-14: The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode,…
• CVE-2023-3524 - CVSS 6.1 (medium), 2023-08-07: The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
• CVE-2023-1624 - CVSS 6.5 (medium), 2023-04-24: The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder.…
• CVE-2023-0328 - CVSS 4.3 (medium), 2023-03-06: The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to…