Unknown WP Coder – Add Custom Html, Css And Js Code vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown WP Coder – Add Custom Html, Css And Js Code, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2021-25053unknownwp coder – add custom html, css and js code+2
EPSS score
0.67%
The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.8.8CVE-2022-2388unknownwp coder – add custom html, css and js code+2
EPSS score
0.43%
The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack