Skip to content
OpenAdvisories

Vendor

codepress

3 known vulnerabilities.

Products

Visitor Traffic Real Time Statistics Pro 2 Admin Columns 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-7654 Public exploit

    Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value

    The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `unserialize()` without an `allowed_classes` restriction in the `IdsToCollection::g…

    codepress Admin Columns Web / CMS