CVE-2025-49029

CRÍTICO 9.1CVE-2025-49029 · Published 01/07/2025 · updated 17/06/2026

Em resumo

CVE-2025-49029 é uma vulnerabilidade CRÍTICO (CVSS 9.1).
Chance de exploração nos próximos 30 dias (EPSS): 2.4%, maior que 83.8% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.kazi Custom Login And Signup Widget custom-login-and-signup-widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through <= 1.0.

References

patchstack.com/database/Wordpress/Plugin/custom-login-and-signup-widget/vulnerability/wordpress-custom-login-and-signup-widget-plugin-1-0-arbitrary-code-execution-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free