Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Wp Coder
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-104677 | 1 Wordpress-extensions | 1 Wp Coder | 2026-10-09 | 7.2 High |
| The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromise the site. | ||||
Page 1 of 1.