Codesnippets Code Snippets — known CVE vulnerabilities

Every CVE whose affected-product data names Codesnippets Code Snippets, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-8417 — CVSS 8.8 (high): The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.
• CVE-2021-25008 — CVSS 6.1 (medium): The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes…
• CVE-2022-25617 — CVSS 4.7 (medium): Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.