Skip to content
OpenAdvisories

Vendor

webheadcoder

2 known vulnerabilities.

Products

WP Log Action 1 WH Tweaks 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2025-67630

    WordPress WH Tweaks plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webheadcoder WH Tweaks wh-tweaks allows Stored XSS.This issue affects WH Tweaks: from n/a through <= 1.0.2.

    webheadcoder WH Tweaks