w
wpcode
Security Risk Profile
27
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 6, 2023 to present
5
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
27/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
0Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
1
2
CSRF
1
Most Affected Products
1. WPCode WPCode WordPress3
2. WPCode WPCode2
3. WordPress WordPress2
4. GoDaddy DollyWay1
Recent Vulnerabilities
See more →CVE-2026-101301
CVSS 5.3medium
WPCode 2.0.0 - 2.3.9 - Unauthenticated Snippet Suppression via Safe Mode Bypass
Oct 14, 2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/malware-campaign-dollyway-breached-20-000-wordpress-sites/
unknown
Malware campaign 'DollyWay' breached 20,000 WordPress sites
Mar 19, 2025🔧 No Patch
CVE-2023-3524
CVSS 6.1medium
WPCode < 2.0.13.1 - Reflected XSS
Aug 7, 2023🔧 No Patch
CVE-2023-1624
CVSS 6.5medium
WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
Apr 24, 2023🔧 No Patch
CVE-2023-0328
CVSS 4.3medium
WPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/Deletion
Mar 6, 2023🔧 No Patch
Monitor wpcode in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.