Read the docs

webheadcoder

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

webheadcoder records in CISA KEV

No webheadcoder vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-18336 CVE-2025-24619 · GHSA-h66v-h338-mpfm

WordPress WP Log Action Plugin <= 0.51 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webheadcoder WP Log Action wp-log-action allows Reflected XSS.This issue affects WP Log Action: from n/a through <= 0.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2025-41373 CVE-2025-67630 · GHSA-hgfr-qrg4-p84c

WordPress WH Tweaks plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webheadcoder WH Tweaks wh-tweaks allows Stored XSS.This issue affects WH Tweaks: from n/a through <= 1.0.2.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0021 Published 2025-12-24 No fix listed CWE-79
Open these records in search →