Description
Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HT Plugins | Insert Headers and Footers Code – HT Script | ≤ 1.1.8 | — |
Medium · 4.3
CVE-2026-66474
EUVD-2026-49249GHSA-w4v3-r7xf-6jph
WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability
Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack