Advisories · Technology
Code Snippets.
Every CVE that names Code Snippets among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)
- Code Snippets
- SQL injection
- CVSS 3.3 Low
Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippet
- Code Snippets
- Broken access control
- CVSS 4.3 Medium
WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)
- Code Snippets
- Cross-site request forgery (CSRF)
-
Code Snippets < 2.14.3 - Reflected Cross-Site Scripting
- Code Snippets
- Cross-site scripting (XSS)