CVE-2020-8417

CVE-2020-8417 affects the WordPress Code Snippets plugin (pre-2.14.0). Root cause: CSRF due to a missing Referer check on the import menu. Several connected sources describe the issue as CSRF, with some stating a risk of remote code execution; however, exploit details are not provided in the docu...

CVE-2021-25008

The Code Snippets WordPress plugin prior to version 2.14.3 does not escape the snippets-safe-mode parameter before reflecting it in attributes, which leads to a reflected XSS. Affected: WordPress Code Snippets plugin for WordPress (versions