Medium severity5.3NVD Advisory· Published Oct 14, 2026

CVE-2026-101301

Description

The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing unauthenticated visitors to disable all of the site's automatically inserted snippets for their own requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/WPCodellm-fuzzy
Range: <2.4.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e60dade1-a7af-4570-bfd6-669d10991d67/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000