Plugin icon

Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts

insert-php

Vulnerabilities:

8

Last Updated:

January 27, 2026

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2024-06-14
Title
Woody code snippets – Insert Header Footer Code, AdSense Ads < 2.5.1 -Authenticated (Contributor+) Remote Code Execution
Fixed in
Fixed in 2.5.1
CVSS
9.9 (critical)
Published
2024-06-06
Title
Woody code snippets – Insert Header Footer Code, AdSense Ads < 2.5.1 - Admin+ Stored XSS
Fixed in
Fixed in 2.5.1
CVSS
4.4 (medium)
Published
2022-06-14
Title
Woody Code Snippets < 2.4.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.4.6
CVSS
6.1 (medium)
Published
2020-09-16
Title
Woody code snippets < 2.3.10 - Arbitrary Settings Update via CSRF
Fixed in
Fixed in 2.3.10
CVSS
4.3 (medium)
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 2.3.10
CVSS
5.4 (medium)
Published
2019-09-13
Title
Woody Ad Snippets < 2.2.9 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.2.9
CVSS
5.4 (medium)
Published
2019-08-09
Title
Woody Ad Snippets < 2.2.6 - Arbitrary Post Deletion
Fixed in
Fixed in 2.2.6
CVSS
6.5 (medium)
Published
2019-08-02
Title
Woody Ad Snippets < 2.2.5 - Multiple issues leading to RCE
Fixed in
Fixed in 2.2.5
CVSS
8.8 (high)