CWE-94: Improper Control of Generation of Code
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Also known as Code Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- theme-one the gridWordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability10.0 Critical
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name5.4 Medium
- rilwis slim seo – ai seo plugin, lightweight, fast & automatedSlim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta5.4 Medium
- wpmudev forminator forms – contact form, payment form & custom form builderForminator Forms <= 1.58.1 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter and Anonymous Comment via render_block6.5 Medium
- wpmu dev - your all-in-one wordpress platform broken link checkerBroken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callback6.5 Medium
- wpmudev forminator forms – contact form, payment form & custom form builderForminator Forms <= 1.58.1 - Unauthenticated Arbitrary Shortcode Execution via 'User-Agent' Header and 'referer_url' Parameter via Quiz Notification Merge Tags6.5 Medium
- ays-pro popup box – create countdown, coupon, video, contact form popupsPopup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers4.8 Medium
- ultralytics fastsamUltralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection4.8 Medium
- imprintlab medical-sam-adapterImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection2.4 Low
- No product listedAn issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows...8.8 High
- wpmu dev broken link checkerWordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability6.5 Medium
- oceanwp ocean extraOcean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode Template6.5 Medium
- No product listedAUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in...9.8 Critical
- labredescefetrj wegiaWeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection6.5 Medium
- shd101wyy vscode-markdown-preview-enhancedMarkdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`8.5 High
- stirling-tools stirling-pdfStirling-PDF: Remote Code Execution via H29.1 Critical
- pluginus.net mdtfWordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability5.3 Medium
- villatheme salevoWordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability7.5 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface8.6 High
- hestiacpHestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking9.9 Critical
- giteaGitea reusable workflow secret exposure in pull_request_target8.8 High
- villatheme email template customizer for woocommerceWordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability7.5 High
- unknown affiliate-toolkitAffiliate Toolkit 3.8.7 - 3.9.0 - Contributor+ RCE via BladeOne @php Directive7.2 High
- teamplus technology messengerTEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection8.6 High
- teamplus technology messengerTEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection8.6 High
- holithemes click to chat – holithemesClick to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder9.1 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)10.0 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)9.1 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)9.9 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php9.3 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Assigned Access Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Performance Monitor Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Encrypting File System (EFS) Remote Code Execution Vulnerability8.8 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Elevation of Privilege Vulnerability8.8 High
- microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.10 +1 moreVisual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema enum symbols can inject statements through generated member names8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema enum field defaults can inject statements into generated modules8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through generated enum-symbol string literals8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema pydantic-class metadata allows code injection in generated annotations8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema fixed namespaces allow code injection in generated annotations8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema record documentation can terminate generated class docstrings8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through generated Meta.schema_name8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through record names in generated default factories8.8 High
- marcosschroh dataclasses-avroschemadataclasses-avroschema allows code injection through generated field-default literals8.8 High
- jumpserverJumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation6.0 Medium
- fearlessgeekmedia fearlesscmsFearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater9.1 Critical
- mongodb server, mongodb, inc. mongodb server +1 moreFixed values in MongoDB Server $bucket stage may be misread as field references5.3 Medium
- saltyorg docsSalty documentation workflow executes fork-controlled Python build hooks with deployment secrets10.0 Critical
- Show moreLoading…