1165 matches found
CVE-2025-13035: Improper Control of Generation of Code
The Code Snippets plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 3.9.1. This is due to the plugin's use of extract on attacker-controlled shortcode attributes within the evaluateshortcodefromflatfile method, which can be used to overwrite the...
PT-2025-47445
Name of the Vulnerable Software and Affected Versions Code Snippets versions prior to 3.9.1 Description The Code Snippets plugin for WordPress is susceptible to PHP Code Injection in versions up to and including 3.9.1. This occurs because the plugin utilizes extract on shortcode attributes...
WordPress Code Snippets plugin <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains vulnerability
Authenticated Contributor+ PHP Code Injection via extract and PHP Filter Chains vulnerability discovered by mikemyers in WordPress Plugin Code Snippets versions = 3.9.1...
EUVD-2009-2727
Malware in sbrugna...
EUVD-2019-5492
Malware in sbrugna...
EUVD-2019-7720
Malware in sbrugna...
EUVD-2019-7719
Malware in sbrugna...
EUVD-2019-7718
Malware in sbrugna...
EUVD-2019-7717
Malware in sbrugna...
EUVD-2021-13995
Malware in sbrugna...
EUVD-2007-2162
Malware in sbrugna...
EUVD-2017-1445
Malware in sbrugna...
EUVD-2018-20579
Malware in sbrugna...
EUVD-2007-2980
Malware in sbrugna...
EUVD-2013-7226
Malware in sbrugna...
EUVD-2008-6721
Malware in sbrugna...
EUVD-2009-5010
Malware in sbrugna...
EUVD-2017-7844
Malware in sbrugna...