What’s Vulnerable › Products
WP Coder – add custom html, css and js code vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your WP Coder – add custom html, css and js code version is affected
Latest WP Coder – add custom html, css and js code vulnerabilities
- CVE-2025-24699 — WordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2024-2578 — WordPress WP Coder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
- CVE-2023-2362 — Multiple Plugins from Wow-Company - Reflected XSS (CVSS 6.1)
- CVE-2023-0895 — WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection (CVSS 4.9)
- CVE-2022-2388 — WP Coder < 2.5.3 - Code Deletion via CSRF (CVSS 6.5)
- CVE-2021-25053 — WP Coder < 2.5.2 - RFI leading to RCE via CSRF (CVSS 8.8)