Vendor

Tigroumeow

1 brief RSS

Remote Code Execution in WordPress Code Engine Plugin via Shortcode (CVE-2025-6784)

The Code Engine plugin for WordPress, in versions up to and including 0.3.5, is vulnerable to Remote Code Execution (RCE) via its 'code-engine' shortcode, allowing authenticated attackers with Contributor-level access or above to execute arbitrary code on the server.

Code Engine plugin wordpress plugin rce cve web-application

1r 2t 1c 1h ago