Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: SaifuMak Clear all filters
TI-2025-38430 CVE-2025-62108 · GHSA-4p79-qfrw-w68q

WordPress Add Custom Codes plugin <= 4.80 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Custom Codes: from n/a through <= 4.80.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
TI-2025-38471 CVE-2025-62149 · GHSA-9v4r-7ghp-pvgf

WordPress Add Custom Codes plugin <= 4.80 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Stored XSS.This issue affects Add Custom Codes: from n/a through <=…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00201 Published 2025-12-31 No fix listed CWE-79
TI-2025-22245 CVE-2025-30975 · GHSA-29cf-7968-4gr3

WordPress Add Custom Codes <= 4.80 - Arbitrary Code Execution vulnerability

Priority LOW 35

Improper Control of Generation of Code ('Code Injection') vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Code Injection.This issue affects Add Custom Codes: from n/a through <= 4.80.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00366 Published 2025-08-20 No fix listed CWE-94