Code Snippets < 3.9.5 - Cloud Snippet Download/Update Actions via CSRF

Description

The plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the cloud snippet download and update actions in the Cloud_Search_List_Table class. This makes it possible for unauthenticated attackers to force logged-in administrators to download or update cloud snippets without their consent via a crafted request, granted they can trick an administrator into visiting a malicious page.