WordPress security by component

AddFunc Head & Footer Code

Plugin description

AddFunc Head & Footer Code is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 10, 2026; the highest CVE/CNA score is 6.4.

Plugin slug: addfunc-head-footer-code

Latest vulnerability

CVE-2026-2305: AddFunc Head & Footer Code: Cross-site scripting

AddFunc Head & Footer Code is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.3.

PublishedApr 10, 2026

Known safe version> 2.3

		Safe version
Apr 10, 2026	CVE-2026-2305 AddFunc Head & Footer Code: Cross-site scripting AddFunc Head & Footer Code is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.3.	> 2.3	CVE6.4 NVDPending