Volerion logoVolerion
Volerion logoVolerion

SaifuMak WordPress Add Custom Codes Plugin Code Injection Vulnerability

Vulnerability

A code injection vulnerability has been identified in the SaifuMak WordPress Add Custom Codes plugin, affecting versions through 4.80. This vulnerability allows arbitrary code execution on the affected site.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected WordPress site.

Remediation

Users of the SaifuMak WordPress Add Custom Codes plugin are advised to update to a version later than 4.80, if available. For immediate protection, Patchstack has issued a virtual patch that blocks attacks targeting this vulnerability.

Added: Aug 20, 2025, 9:17 AM
Updated: Aug 20, 2025, 9:17 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
5.2
remediation
0.0
relevance
0.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.