Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript
Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 4 disclosures.
The most common weakness is Code Injection, behind 1 of the records (25%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.
Every one of the 4 issues recorded for Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (2) reported by Certus Cybersecurity. Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-30975Add Custom Codes <= 4.80 - Authenticated (Contributor+) Remote Code Execution
Read the full analysisVulnerability Records
Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript
Author
SaifuMak
Add custom codes to your wordpress website. You can add custom PHP Functions, HTML, custom CSS, Javascript, Google Analytics, Search Console verification tags or other code snippets to your site. Features 100% free wordpress plugin, no paid upgrades needed! Add PHP Snippets, Custom CSS, Javascript, Google Analytics, Facebook Scripts, Meta Verification Codes, Search console verification and other codes to your wordpress website easily. Generate Shortcodes for HTML Snippets and use it anywhere on the site! Syntax highlighter enabled with Light and Dark Mode Editors Classify snippets using tags Add Notes to Snippets Activate/Inactivate snippets with a single click Auto-deactivate feature for PHP snippets that causes errors. Add Custome Codes globally or on individual posts, pages, products and even on custom post types. Option to select where to put snippets: before </head> or before </body> etc. Import/Export Snippets to use on other sites.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C