{"error":0,"message":null,"data":{"name":"Code Snippets","plugin":"code-snippets","link":"https:\/\/wordpress.org\/plugins\/code-snippets\/","latest":"1788334260","closed":0,"closed_reason":null,"closed_date":null,"vulnerability":[{"uuid":"ff47dc8f00150e1b7eb0f1143b9cfd31b3ec8c99fc44e0d6abf9db3f103c7b91","name":"Code Snippets [code-snippets] < 2.14.3","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.14.3","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2021-25008","name":"CVE-2021-25008","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2021-25008","description":"[en] The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue","date":"2022-01-24"},{"id":"5266962046ca340b9c69f636ed0bcf11331c0262","name":"WordPress Code Snippets plugin <= 2.14.2 - Reflected Cross-Site Scripting (XSS) vulnerability","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/code-snippets\/vulnerability\/wordpress-code-snippets-plugin-2-14-2-reflected-cross-site-scripting-xss-vulnerability","description":"Reflected Cross-Site Scripting (XSS) vulnerability discovered by Krzysztof Zaj\u0105c in WordPress Code Snippets plugin (versions <= 2.14.2).","date":"2021-12-27"},{"id":"cb232354-f74d-48bb-b437-7bdddd1df42a","name":"Code Snippets &lt; 2.14.3 - Reflected Cross-Site Scripting","link":"https:\/\/wpscan.com\/vulnerability\/cb232354-f74d-48bb-b437-7bdddd1df42a","description":"The plugin does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue","date":null},{"id":"e56b525bde3c272c3c580128757770f9ca159ef8","name":"Code Snippets <= 2.14.2 - Reflected Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/code-snippets\/code-snippets-2142-reflected-cross-site-scripting","description":"The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue","date":"2021-12-27"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"n","ui":"r","s":"c","c":"l","i":"l","a":"n","score":"6.1","severity":"m","exploitable":"2.8","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N","score":"6.1","severity":"medium","av":"network","ac":"low","pr":"none","ui":"required","s":"changed","c":"low","i":"low","a":"none","exploitable":"2.8","impact":"2.7"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}]}},{"uuid":"f22ee56362e401c578529f8549d69e2dabb086924a738df8f1235ecbd9c1ad78","name":"Code Snippets [code-snippets] < 2.14.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.14.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2020-8417","name":"CVE-2020-8417","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2020-8417","description":"[en] The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.","date":"2020-01-28"},{"id":"0f3da6354e3c3b0495ced83d18b4596fb6d72f47","name":"WordPress Code Snippets plugin <= 2.13.3 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE) vulnerability","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/code-snippets\/vulnerability\/wordpress-code-snippets-plugin-2-13-3-cross-site-request-forgery-csrf-to-remote-code-execution-rce-vulnerability","description":"Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE) vulnerability found by Chloe Chamberland in WordPress Code Snippets plugin (versions <= 2.13.3).","date":"2020-01-29"},{"id":"0db4c0e7-7556-4e7d-b4b6-54f333ef5f11","name":"Code Snippets &lt; 2.14.0 - CSRF to RCE","link":"https:\/\/wpscan.com\/vulnerability\/0db4c0e7-7556-4e7d-b4b6-54f333ef5f11","description":"This &quot;flaw allowed anybody to forge a request on behalf of an administrator and inject executable code on a vulnerable site.&quot;","date":null},{"id":"fed0d9f816dc25b985d3c4a64cd410ce85b4dd91","name":"Code Snippets <= 2.13.3 - Cross-Site Request Forgery to Remote Code Execution","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/code-snippets\/code-snippets-2133-cross-site-request-forgery-to-remote-code-execution","description":"The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.","date":"2020-01-29"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H","av":"n","ac":"l","pr":"n","ui":"r","s":"u","c":"h","i":"h","a":"h","score":"8.8","severity":"h","exploitable":"2.8","impact":"5.9"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:H\/I:H\/A:H","score":"8.8","severity":"high","av":"network","ac":"low","pr":"none","ui":"required","s":"unchanged","c":"high","i":"high","a":"high","exploitable":"2.8","impact":"5.9"},"cwe":[{"cwe":"CWE-352","name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor."}]}},{"uuid":"72ebac96870ec89e8cc613b9d4b030ffa2ea68fc086c5820d0938893a20b9ec2","name":"Code Snippets [code-snippets] < 2.14.4","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.14.4","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2022-25617","name":"CVE-2022-25617","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2022-25617","description":"[en] Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.","date":"2022-05-18"},{"id":"864c1845-ae0e-4a21-be05-bf594840873e","name":"Code Snippets &lt; 2.14.4 - Reflected Cross-Site Scripting","link":"https:\/\/wpscan.com\/vulnerability\/864c1845-ae0e-4a21-be05-bf594840873e","description":"The plugin does not sanitise and escape a parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting","date":null},{"id":"f2cd0627e215a149f795fc491c5e7b80aae56e7e","name":"Code Snippets <= 2.14.3 - Reflected Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/code-snippets\/code-snippets-2143-reflected-cross-site-scripting","description":"Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.","date":"2022-05-18"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N","av":"n","ac":"l","pr":"n","ui":"r","s":"c","c":"l","i":"l","a":"n","score":"6.1","severity":"m","exploitable":"2.8","impact":"2.7"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N","score":"6.1","severity":"medium","av":"network","ac":"low","pr":"none","ui":"required","s":"changed","c":"low","i":"low","a":"none","exploitable":"2.8","impact":"2.7"},"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"e6374097c488b0adbb629c5e3e76d2ea0e1d5e3fad3877846225967db053f8c8","name":"Code Snippets [code-snippets] < 2.7.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.7.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"9f9548e1a04bfd80882b74fe9baeba815447c875","name":"WordPress Code Snippets Plugin <= 2.6.1 - Cross Site Scripting","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/code-snippets\/vulnerability\/wordpress-code-snippets-plugin-2-6-1-cross-site-scripting","description":"Because of this vulnerability, attacker can inject malicious JavaScript code into the application.\nUpdate the plugin.","date":"2016-07-24"}],"impact":[]},{"uuid":"a7a09c0b5ada7829b26eb8e3e81ead24bd431ef3fa7de9810fb90e68cfd332c9","name":"Code Snippets [code-snippets] < 2.7.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.7.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"a7ebb9e7-4243-4531-9f05-2475a164d74b","name":"Code Snippets &lt;= 2.6.1 - Authenticated Reflected Cross-Site Scripting (XSS)","link":"https:\/\/wpscan.com\/vulnerability\/a7ebb9e7-4243-4531-9f05-2475a164d74b","description":"The Code Snippets WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting (XSS) security vulnerability.","date":null}],"impact":[]},{"uuid":"1e184970efe9505679678ce2a966d653d4d24061bcc3d062e37c86fb366949f1","name":"Code Snippets [code-snippets] < 2.7.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.7.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"ee237115758ba9ea48f9dd6dd1191467609e60f6","name":"Code Snippets < 2.7.0 - Reflected Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/code-snippets\/code-snippets-270-reflected-cross-site-scripting","description":"The Code Snippets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018tag\u2019 parameter in versions before 2.7.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.","date":"2016-07-24"}],"impact":[]},{"uuid":"727a6645e7d291651d09747328b1a7498711f69827899b0974d4d5e5b7ba258d","name":"Code Snippets [code-snippets] < 3.6.0","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.6.0","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"0d4ef02dabd8c89a463ebb5a18d9fa1c4b836ebe","name":"Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/code-snippets\/code-snippets-350-cross-site-request-forgery-via-load","description":"The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.5.0. This is due to missing or incorrect nonce validation on the load function. This makes it possible for unauthenticated attackers to reset plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","date":"2023-11-06"},{"id":"CVE-2023-47666","name":"CVE-2023-47666","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-47666","description":"[en] Cross-Site Request Forgery (CSRF) vulnerability in Code Snippets Pro Code Snippets.This issue affects Code Snippets: from n\/a through 3.5.0.","date":"2023-11-18"},{"id":"7185172a575d55ee2f2a16397ae826e15eca7b79","name":"WordPress  Code Snippets Plugin  <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/code-snippets\/vulnerability\/wordpress-code-snippets-plugin-3-5-0-cross-site-request-forgery-csrf-vulnerability","description":"Update the WordPress Code Snippets plugin to the latest available version (at least 3.6.0).\nHuynh Tien Si discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Code Snippets Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version 3.6.0.","date":"2023-11-08"},{"id":"5301f365-c283-434f-8521-b8d61a57c84d","name":"Code Snippets &lt; 3.6.0 - Arbitrary settings change via CSRF","link":"https:\/\/wpscan.com\/vulnerability\/5301f365-c283-434f-8521-b8d61a57c84d","description":"The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.","date":null}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:N\/I:L\/A:N","av":"n","ac":"l","pr":"n","ui":"r","s":"u","c":"n","i":"l","a":"n","score":"4.3","severity":"m","exploitable":"2.8","impact":"5.9"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:U\/C:N\/I:L\/A:N","score":"4.3","severity":"medium","av":"network","ac":"low","pr":"none","ui":"required","s":"unchanged","c":"none","i":"low","a":"none","exploitable":"2.8","impact":"5.9"},"cwe":[{"cwe":"CWE-352","name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}},{"uuid":"7c6fef5583c96f951540cc65a478a62ad0e71d101055c0d495fa9bdd5682d6af","name":"Code Snippets [code-snippets] < 3.9.2","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.9.2","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2025-13035","name":"CVE-2025-13035","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2025-13035","description":"[en] The Code Snippets plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.9.1. This is due to the plugin's use of extract() on attacker-controlled shortcode attributes within the `evaluate_shortcode_from_flat_file` method, which can be used to overwrite the `$filepath` variable and subsequently passed to require_once. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute arbitrary PHP code on the server via the `[code_snippet]` shortcode using PHP filter chains granted they can trick an administrator into enabling the \"Enable file-based execution\" setting and creating at least one active Content snippet.","date":"2025-11-19"},{"id":"99d3322bb75c38602b4a0009b3573b20a33960a7","name":"Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/code-snippets\/code-snippets-391-authenticated-contributor-php-code-injection-via-extract-and-php-filter-chains","description":"The Code Snippets plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.9.1. This is due to the plugin's use of extract() on attacker-controlled shortcode attributes within the `evaluate_shortcode_from_flat_file` method, which can be used to overwrite the `$filepath` variable and subsequently passed to require_once. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute arbitrary PHP code on the server via the `[code_snippet]` shortcode using PHP filter chains granted they can trick an administrator into enabling the \"Enable file-based execution\" setting and creating at least one active Content snippet.","date":"2025-11-18"}],"impact":{"cvss":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:H\/PR:L\/UI:R\/S:C\/C:H\/I:H\/A:H","av":"n","ac":"h","pr":"l","ui":"r","s":"c","c":"h","i":"h","a":"h","score":"8.0","severity":"h","exploitable":"1.3","impact":"6.0"},"cvss3":{"version":"3.1","vector":"CVSS:3.1\/AV:N\/AC:H\/PR:L\/UI:R\/S:C\/C:H\/I:H\/A:H","score":"8.0","severity":"high","av":"network","ac":"high","pr":"low","ui":"required","s":"changed","c":"high","i":"high","a":"high","exploitable":"1.3","impact":"6.0"},"cwe":[{"cwe":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment."}],"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","kev":false,"kev_date":null}}},{"uuid":"e33b4ced4be84222cfa442e60ea1a6b1019396e2f7bc5ce3d8306c6a413c7405","name":"Code Snippets [code-snippets] < 3.9.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.9.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2026-1785","name":"Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download\/Update Actions","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-1785","description":"The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.4. This is due to missing nonce validation on the cloud snippet download and update actions in the Cloud_Search_List_Table class. This makes it possible for unauthenticated attackers to force logged-in administrators to download or update cloud snippets without their consent via a crafted request, granted they can trick an administrator into visiting a malicious page.","date":"0000-00-00"},{"id":"74829b0778a305bd9f5c5e2d43da6e12c31cc81b","name":"Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download\/Update Actions","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/code-snippets\/code-snippets-394-cross-site-request-forgery-to-cloud-snippet-downloadupdate-actions","description":"The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.9.4. This is due to missing nonce validation on the cloud snippet download and update actions in the Cloud_Search_List_Table class. This makes it possible for unauthenticated attackers to force logged-in administrators to download or update cloud snippets without their consent via a crafted request, granted they can trick an administrator into visiting a malicious page.","date":"2026-02-05"}],"impact":{"ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","kev":false,"kev_date":null}}}]},"updated":"1776160725"}