CVE

CVE-2025-49029

9.1

CVSScritical

Exploitable remotely over the internet · requires high privileges.

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.kazi Custom Login And Signup Widget custom-login-and-signup-widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through <= 1.0.

Attack Vector

Network

Privileges Req.

High

User Interaction

None

custom login and signup widget

Updated Sep 28, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2025-49029 Scanner

CVE-2025-49029 Scanner - Code Injection vulnerability in WordPress Custom Login And Signup Widget Plugin

Used 3.4k times · 3.3k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: custom login and signup widget

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →