WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in AddFunc Head & Footer Code

Easily add code to your head, footer and/or immediately after the opening body tag, site-wide and/or on any individual page/post.

1Reported vulnerabilities
6.4Highest CVSS score
2.5Latest version
20,000+Active installs

What to do now

Update AddFunc Head & Footer Code to 2.4 or later. 1 of these have a fixed version available. Updating resolves them.

Plugin last updated: April 22, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2026-2305 Medium 6.4 0.2% 0 to 2.3 (inclusive) 2.4 April 10, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.