CVE-2024-13900

The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.3.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject PHP Code in multisite environments...

PT-2025-7404 · WordPress · Head

Name of the Vulnerable Software and Affected Versions: Head, Footer and Post Injections plugin for WordPress versions up to, and including, 3.3.0 Description: The issue allows authenticated attackers with Administrator-level access and above to inject PHP code in multisite environments...

WordPress Head, Footer and Post Injections plugin <= 3.3.0 - Authenticated (Administrator+) PHP Code Injection in Multisite Environments vulnerability

Authenticated Administrator+ PHP Code Injection in Multisite Environments vulnerability discovered by Francesco Carlucci in WordPress Plugin Head, Footer and Post Injections versions = 3.3.0...