TI-2026-40443 CVE-2026-56049 · GHSA-5rvc-gxqm-fm4r
WordPress Post Snippets plugin <= 4.0.19 - Remote Code Execution (RCE) vulnerability
Priority MEDIUM 40
Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions.
Vulnerabilities
3 records
TI-2023-10769 CVE-2023-25459 · GHSA-8273-prm8-j68p
WordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Postsnippets Post Snippets plugin <= 4.0.2 versions.
TI-2021-07288 CVE-2021-25010 · GHSA-x3f9-wfr9-6xw8
Post Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting
Priority MEDIUM 42
The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets.