Vulnerabilities

TI-2022-11905 CVE-2022-29435 · GHSA-fx9c-g9f5-59gr

WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 25

Cross-Site Request Forgery (CSRF) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress allows an attacker to delete or to turn on/off snippets.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00399 Published 2022-05-17 No fix listed CWE-352

TI-2022-11906 CVE-2022-29436 · GHSA-hr68-2776-7q9f

Cross-site request forgery in Alexander Stokmann Code Snippets Extended

LOW 27

Persistent Cross-Site Scripting (XSS) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress via Cross-Site Request Forgery (vulnerable parameters &title, &snippet_code).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00388 Published 2022-05-17 No fix listed CWE-352

TI-2022-11899 CVE-2022-29429 · GHSA-m5g4-r79w-6v6w

Cross-site request forgery in Alexander Stokmann Code Snippets Extended

MEDIUM 42

Remote Code Execution (RCE) in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress via Cross-Site Request Forgery.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0096 Published 2022-05-17 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-site request forgery in Alexander Stokmann Code Snippets Extended

Cross-site request forgery in Alexander Stokmann Code Snippets Extended