Code Snippets

Code Snippets has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 7 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 3 of the records (43%). Other recurring categories include Cross-Site Scripting, Code Injection.

Every one of the 7 issues recorded for Code Snippets has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, one record each. Code Snippets is installed on roughly 1,000,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Code Snippets vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2020-8417

Code Snippets <= 2.13.3 - Cross-Site Request Forgery to Remote Code Execution

Read the full analysis

Vulnerability Records

7 records


2026-02-05 19:33	Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions Code Snippets <= 3.9.4	`CVE-2026-1785`	4.3 Medium	type5afe	Yes
2025-11-18 19:03	Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains Code Snippets <= 3.9.1	`CVE-2025-13035`	8.0 High	mikemyers	Yes
2023-11-06 00:00	Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load Code Snippets < 3.6.0	`CVE-2023-47666`	5.4 Medium	Huynh Tien Si	Yes
2022-05-18 13:17	Code Snippets <= 2.14.3 - Reflected Cross-Site Scripting Code Snippets <= 2.14.3	`CVE-2022-25617`	4.7 Medium	R3N0	Yes
2021-12-27 00:00	Code Snippets <= 2.14.2 - Reflected Cross-Site Scripting Code Snippets < 2.14.3	`CVE-2021-25008`	6.1 Medium	Krzysztof Zając	Yes
2020-01-29 00:00	Code Snippets <= 2.13.3 - Cross-Site Request Forgery to Remote Code Execution Code Snippets <= 2.13.3	`CVE-2020-8417`	8.8 High	Chloe Chamberland	Yes
2016-07-24 00:00	Code Snippets < 2.7.0 - Reflected Cross-Site Scripting Code Snippets < 2.7.0	`N/A`	6.1 Medium	Burak Kelebek	Yes

Showing 1–7 of 7 reports

Latestv3.10.2

Code Snippets

Author

Code Snippets Pro

4.7(509)

94/100

Last Updated

2026-09-02 (11d ago)

Active Installs

1,000,000+

Downloads

23,190,021

Requires WP

5.5+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2012-06-13 (15y ago)

✂ Code Snippets provides an effortless way to enhance your WordPress site. 🚀 Upgrade to Code Snippets Pro for complete CSS, JavaScript, Gutenberg, Elementor and cloud synchronisation integrations. Elevate your snippets experience now! Say goodbye to the hassle of tweaking your theme’s functions.php file and downloading endless plugins – Code Snippets simplifies the process! A snippet is like a mini-plugin for your WordPress site, providing added functionality without the clutter. Unlike other solutions that involve dumping code into your functions.php file, Code Snippets offers an intuitive graphical interface for seamless integration and real-time execution. Managing snippets is as easy as activating and deactivating plugins, only without the bloat and overhead. 🎥 Watch a quick overview by Imran Siddiq: ☁️ Each copy of Code Snippets includes full integration with the community-powered Code Snippets Cloud platform, providing easy access to hundreds of tweaks and enhancements ready to power-up any WordPress site. 🌐 Connect with us: Support Forum Facebook Community Discord Community GitHub Repository 🌟 Like our plugin? Find it useful? Please consider sharing your experience by leaving a review on WordPress.org. Your feedback is instrumental to shaping our future growth! 🌍 We’d like to thank the wonderful people who have helped contribute translations to allow Code Snippets to be used in different languages. You can find a full list here.

View on WordPress.org