Vulnerabilidades do Htplugins Insert Headers and Footers Code – HT Script
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Htplugins Insert Headers and Footers Code – HT Script: 2 registro(s), com versões afetadas e correções.
CVE-2026-66474
Média · 4.3
CWE-352 27/07/2026
WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions.
CVE-2025-12112
Média · 6.4
CWE-79 08/11/2025
Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scripting
The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adding scripts in all versions up to, and including, 1.1.6 due to insufficient capability checks. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.