Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WP Coder – Code Snippets + HTML, CSS, JS and PHP Injection 3.6

  • Severity: medium-risk
  • Status: Fixed
  • Publication: January 31, 2025

The WP Coder plugin for WordPress has a security vulnerability that allows unauthorized individuals to change settings and insert harmful code into websites. This is because the plugin does not properly validate nonces, which are used to verify the authenticity of requests. This means that if a site administrator is tricked into clicking a link, an attacker can exploit this vulnerability.

Detected in:

WP Coder – Code Snippets + HTML, CSS, JS and PHP Injection fixed vulnerable versions:
WP Coder – Insert & Manage Code Snippets fixed vulnerable versions:
WP Coder – Insert Custom PHP, HTML, CSS & JS in WordPress fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.