CVE-2025-48140

creationtimestamp| type| source ---|---|--- 2025-06-09 19:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr73wm47er2u...

CVE-2025-48140

CVE-2025-48140 is a confirmed RCE in the WordPress plugin MetalpriceAPI (versions ≤ 1.1.4) due to an improper control of code generation. The vulnerability allows code execution on affected sites; patch status indicates a fix has been applied in later versions. Affected product is the MetalpriceA...

CVE-2025-48140 WordPress MetalpriceAPI plugin <= 1.1.4 - Remote Code Execution (RCE) Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects MetalpriceAPI: from n/a through = 1.1.4...

WordPress MetalpriceAPI plugin <= 1.1.4 - Remote Code Execution (RCE) Vulnerability

Remote Code Execution RCE Vulnerability discovered by ch4r0n in WordPress Plugin MetalpriceAPI versions = 1.1.4...