WPCasa vulnerabilities

1 known vulnerability in WPCasa from WPSight. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WPCasa: Improper Control of Generation of Code

  CVE-2025-9321Sep 23, 2025WPSight

  The WPCasa plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.4.1. This is due to insufficient input validation and restriction on the 'api_requests' function. This makes it possible for unauthenticated attackers to ca