CVE-2024-7420

CVE-2024-7420 concerns the WordPress plugin Insert PHP Code Snippet. Connected sources confirm a CSRF vulnerability across all versions up to 1.3.6 due to missing/incorrect nonce validation in /admin/snippets.php, enabling unauthenticated attackers to activate/deactivate and delete code snippets ...