critical9.9

CVE-2025-48140

Improper Control of Generation of Code ('Code Injection') vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects M…

Impact

Improper Control of Generation of Code ('Code Injection') vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects MetalpriceAPI: from n/a through <= 1.1.4.

Affected products

Product	Affected versions
MetalpriceAPI: From N/A Through	through 1.1.4.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-94

References

NVD record
CVE.org record
https://patchstack.com/database/Wordpress/Plugin/metalpriceapi/vulnerability/wordpress-metalpriceapi-1-1-4-remote-code-execution-rce-vulnerability?_s_id=cve