Confection WordPress Cable vulnerabilities
We track 1 vulnerability in Confection WordPress Cable products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest Confection WordPress Cable vulnerabilities
- 10.0 Critical severity
Confection WordPress Cable: Improper Control of Generation of Code
The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users t