WPCode vulnerabilities

Advisories WPSec published for WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager. Other sources may list more. Its attack surface: WPCode on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-10 WPSEC-2026-0695 WPCode <= 2.3.9 - Unauthenticated Snippet Execution Bypass via 'wpcode-safe-mode' Parameter Medium 5.3 2.4.0

License: CC BY 4.0