Code Snippets
Approved changes feed: RSS · Atom
cpe:2.3:a:codesnippets:code_snippets:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Codesnippets (a2bbe569-3783-5da6-b92e-33d08122398c) |
|---|---|
| Product | Code Snippets (cba03252-1a83-5a64-9c44-f4e374fe5a75) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/code-snippets |
purl2cpe | 2026-06-01 10:16:02.854338 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25617 |
vulnerable | 2026-06-08 05:41:46.060904 |
WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability
MEDIUM (4.7)
Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.
Published: 2022-05-18T17:21:49.648Z
Updated: 2026-04-28T16:07:39.179Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25008 |
vulnerable | 2026-06-08 05:30:39.786297 |
Code Snippets < 2.14.3 - Reflected Cross-Site Scripting
The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue
Published: 2022-01-24T08:01:07.000Z
Updated: 2024-08-03T19:49:14.599Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8417 |
vulnerable | 2026-06-08 05:27:16.504130 |
Details available
HIGH (8.8)
The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.
Published: 2020-01-28T20:19:25.000Z
Updated: 2024-08-04T09:56:28.398Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.