Skip to content
Threat Feed
Subscribe

Product

Code Engine Plugin

1 brief RSS
high advisory

Remote Code Execution in WordPress Code Engine Plugin via Shortcode (CVE-2025-6784)

The Code Engine plugin for WordPress, in versions up to and including 0.3.5, is vulnerable to Remote Code Execution (RCE) via its 'code-engine' shortcode, allowing authenticated attackers with Contributor-level access or above to execute arbitrary code on the server.

Code Engine plugin wordpress plugin rce cve web-application
1r 2t 1c