PT-2025-44607 · F1Logic · Insert Php Code Snippet

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-64356

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Insert PHP Code Snippet versions through 1.4.3

Description A missing authorization flaw exists in f1logic Insert PHP Code Snippet’s insert-php-code-snippet functionality. This issue stems from incorrectly configured access control security levels, potentially allowing unauthorized access.

Recommendations Versions prior to 1.4.4 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-64356

Affected Products

Insert Php Code Snippet

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-64356 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/insert-php-code-snippet/vulnerability/wordpress-insert-php-code-snippet-plugin-1-4-3-broken-access-control-vulnerability · Note
• https://patchstack.com/database/Wordpress/Plugin/insert-php-code-snippet/vulnerability/wordpress-insert-php-code-snippet-plugin-1-4-3-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1984236638479020442 · Twitter Post
• https://t.me/CVEtracker/36286 · Telegram Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/insert-php-code-snippet/vulnerability/wordpress-insert-php-code-snippet-plugin-1-4-3-broken-access-control-vulnerability?_s_id=cve · Note