Skip to content
Noroxi

Woody ad snippets

insert-php · plugin

Known security vulnerabilities for Woody ad snippets. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

3 critical · 2 with public exploit code · latest Jun 9, 2026

Vulnerabilities

  • CVE-2026-25366

    WordPress Woody ad snippets plugin <= 2.7.1 - Remote Code Execution (RCE) vulnerability

    Critical 9.9

  • CVE-2024-3105

    Woody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 -Authenticated (Contributor+) Remote Code Execution

    Critical 9.9

  • CVE-2017-20251→ 3.3.1

    WordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API

    Critical 9.3

  • CVE-2019-14773

    admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action

    High 7.5

  • CVE-2019-16289

    The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.

    Medium 5.4

  • CVE-2024-35751

    WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

    Medium 4.8

  • CVE-2020-36759→ 2.3.10

    Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass

    Medium 4.3

← Back to directory