Codesnippets - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2022-05-18.

Products

• Code Snippets - 3 CVEs

Newest CVEs of Codesnippets

• CVE-2022-25617 - CVSS 6.1 (medium), 2022-05-18: Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.
• CVE-2021-25008 - CVSS 6.1 (medium), 2022-01-24: The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a…
• CVE-2020-8417 - CVSS 8.8 (high), 2020-01-28: The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.