35 matches found
CVE-2022-29436
Persistent Cross-Site Scripting XSS vulnerability in Alexander Stokmann's Code Snippets Extended plugin = 1.4.7 on WordPress via Cross-Site Request Forgery vulnerable parameters , code...
WordPress plugin Code Snippets Extended 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Code Snippets Extended has a cross-site scripting vulnerability, and no details of the...
CVE-2022-29436: Cross-Site Request Forgery (CSRF)
Persistent Cross-Site Scripting XSS vulnerability in Alexander Stokmann's Code Snippets Extended plugin = 1.4.7 on WordPress via Cross-Site Request Forgery vulnerable parameters &title, &snippetcode...
PT-2022-19602 · WordPress · Code Snippets Extended
Name of the Vulnerable Software and Affected Versions: Code Snippets Extended plugin versions 1.4.7 and earlier Description: The issue concerns a Remote Code Execution RCE in the Code Snippets Extended plugin for WordPress, which can be exploited via Cross-Site Request Forgery. Recommendations: F...
WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability discovered by BEE-K Patchstack in WordPress Code Snippets Extended plugin versions = 1.4.7. Solution Deactivate and delete. No patched version is available. No reply from the vendor...
Code Snippets Extended <= 1.4.7 - Stored Cross-Site Scripting via CSRF
The plugin does not have CSRF in place when creating/editing snippets, as well as is lacking sanitisation and escaping in some fields, which could allow attackers to make a logged in admin create/edit arbitrary snippets and place XSS payloads in them...
WordPress plugin Code Snippets Extended 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress Code...
WordPress plugin Code Snippets Extended 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Code Snippets Extended is vulnerable to cross-site request forgery, which can be exploited by...
PT-2022-19610
Name of the Vulnerable Software and Affected Versions Code Snippets Extended plugin versions 1.4.7 and earlier Description The issue is related to a Persistent Cross-Site Scripting XSS vulnerability. It can be exploited via Cross-Site Request Forgery CSRF and involves vulnerable parameters title...
CVE-2022-29429: Cross-Site Request Forgery (CSRF)
Remote Code Execution RCE in Alexander Stokmann's Code Snippets Extended plugin = 1.4.7 on WordPress via Cross-Site Request Forgery...
CVE-2022-29435: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Alexander Stokmann's Code Snippets Extended plugin = 1.4.7 on WordPress allows an attacker to delete or to turn on/off snippets...
PT-2022-19609
Name of the Vulnerable Software and Affected Versions Code Snippets Extended plugin versions = 1.4.7 Description A Cross-Site Request Forgery CSRF issue allows an attacker to perform actions such as deleting or toggling snippets on or off. Recommendations For Code Snippets Extended plugin version...
CVE-2022-29429
Remote Code Execution RCE in Alexander Stokmann's Code Snippets Extended plugin = 1.4.7 on WordPress via Cross-Site Request Forgery...
WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) leading to Remote Code Execution (RCE) vulnerability
Cross-Site Request Forgery CSRF leading to Remote Code Execution RCE vulnerability discovered by Rasi Afeef Patchstack Alliance in WordPress Code Snippets Extended plugin versions = 1.4.7. Solution No patched version is available. No reply from the vendor...