Product · smub

WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2026-8832 Public exploit

WPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPost

The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a…

smub WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager Web / CMS

May 27, 2026