VYPR

Add Custom Page Template

by WordPress

Source repositories

CVEs (1)

  • CVE-2025-3491HigApr 26, 2025
    risk 0.47cvss 7.2epss 0.01

    The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'acpt_validate_setting' function. This is due to insufficient sanitization of the 'template_name' parameter.…