Skip to content
OpenAdvisories

Vendor

wpcalc

8 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2

    WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection

    The WP Coder – add custom html, css and js code plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient pr…