Skip to content
Noroxi

Code Snippets

code-snippets · plugin

Known security vulnerabilities for Code Snippets. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 with public exploit code · latest Feb 6, 2026

Vulnerabilities

  • CVE-2023-47666

    WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

    High 8.8

  • CVE-2020-8417

    The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.

    High 8.8

  • CVE-2025-13035

    Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains

    High 8.0

  • CVE-2022-25617

    WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability

    Medium 6.1

  • CVE-2026-1785

    Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions

    Medium 4.3

← Back to directory