Plugin icon

Code Snippets

code-snippets

Vulnerabilities:

7

Last Updated:

February 5, 2026

Active Installs:

1000000

Published
Title
Fixed in
CVSS
Published
2026-02-05
Title
Code Snippets < 3.9.5 - Cloud Snippet Download/Update Actions via CSRF
Fixed in
Fixed in 3.9.5
CVSS
4.3 (medium)
Published
2025-11-18
Title
Code Snippets < 3.9.2 - Contributor+ PHP Code Injection via extract() and PHP Filter Chains
Fixed in
Fixed in 3.9.2
CVSS
8.0 (high)
Published
2023-11-06
Title
Code Snippets < 3.6.0 - Arbitrary settings change via CSRF
Fixed in
Fixed in 3.6.0
CVSS
4.3 (medium)
Published
2022-05-18
Title
Code Snippets < 2.14.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.14.4
CVSS
6.1 (medium)
Published
2021-12-27
Title
Code Snippets < 2.14.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.14.3
CVSS
7.5 (high)
Published
2020-01-29
Title
Code Snippets < 2.14.0 - CSRF to RCE
Fixed in
Fixed in 2.14.0
CVSS
8.8 (high)
Published
2016-07-24
Title
Code Snippets < 2.7.0 - Authenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.7.0
CVSS
n/a