Vulnerabilities

TI-2022-09206 CVE-2022-25617 · GHSA-9c55-9p58-4g75

WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0082 Published 2022-05-18 No fix listed CWE-79

TI-2021-07286 CVE-2021-25008 · GHSA-vwwf-8mvf-74w3

Code Snippets < 2.14.3 - Reflected Cross-Site Scripting

LOW 32

The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02258 Published 2022-01-24 Fixed in 2.14.3 CWE-79

TI-2020-06757 CVE-2020-8417 · GHSA-79v2-jw48-fw68

The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a…

MEDIUM 52

The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.11905 Published 2020-01-28 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Code Snippets < 2.14.3 - Reflected Cross-Site Scripting

The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a…