Post Snippets

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Post Snippets records in CISA KEV

No Post Snippets vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Post Snippets 2 records MEDIUM

Records

2 records in Post Snippets · all components

TI-2021-07288 CVE-2021-25010 · GHSA-x3f9-wfr9-6xw8

Post Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting

MEDIUM 42

The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00612 Published 2022-02-28 Fixed in 3.1.4 CWE-352

TI-2023-10769 CVE-2023-25459 · GHSA-8273-prm8-j68p

WordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Postsnippets Post Snippets plugin <= 4.0.2 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00396 Published 2023-08-08 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0