1165 matches found
CVE-2025-13035: Improper Control of Generation of Code
The Code Snippets plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.9.1. This is due to the plugin's use of extract on attacker-controlled shortcode attributes within the evaluateshortcodefromflatfile method, which can be used to overwrite the...
PT-2025-47445
Name of the Vulnerable Software and Affected Versions Code Snippets versions prior to 3.9.1 Description The Code Snippets plugin for WordPress is susceptible to PHP Code Injection in versions up to and including 3.9.1. This occurs because the plugin utilizes extract on shortcode attributes...
WordPress Code Snippets plugin <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains vulnerability
Authenticated Contributor+ PHP Code Injection via extract and PHP Filter Chains vulnerability discovered by mikemyers in WordPress Plugin Code Snippets versions = 3.9.1...
EUVD-2019-7718
Malware in sbrugna...
EUVD-2007-2162
Malware in sbrugna...
EUVD-2020-26754
Malware in sbrugna...
EUVD-2019-7720
Malware in sbrugna...
EUVD-2009-1672
Malware in sbrugna...
EUVD-2017-1445
Malware in sbrugna...
EUVD-2008-6721
Malware in sbrugna...
EUVD-2019-16271
Malware in sbrugna...
EUVD-2018-20579
Malware in sbrugna...
EUVD-2018-17548
Malware in sbrugna...
EUVD-2008-0400
Malware in sbrugna...
EUVD-2005-2572
Malware in sbrugna...
EUVD-2003-0315
Malware in sbrugna...
EUVD-2019-7712
Malware in sbrugna...
EUVD-2019-7719
Malware in sbrugna...