Content Snippet Manager

Content Snippet Manager has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Content Snippet Manager has a vendor fix available, so running the current release closes it.

All of these findings were reported by Abdi Pranata. Content Snippet Manager is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Content Snippet Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-26759

Content Snippet Manager <= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Content Snippet Manager banner
Latestv1.2.0

Content Snippet Manager

alexvtn

Author

alexvtn

0.0(0)
0/100
Last Updated
2026-08-29 (15d ago)
Active Installs
100+
Downloads
12,352
Requires WP
3.5.0+
Requires PHP
5.6+
Tested up to
WP 7.1
Created
2020-11-25 (6y ago)

Content Snippet Manager plugin allows you to create and manage unlimited numbers of HTML and WordPress shortcodes in your WordPress content You will be able to choose the position and the destination of each snippet. For example, you may need to insert an Amazon banner or a subscription newsletter shortcode at the middle or at the end of all posts, you can do it using our plugin, without being forced to edit manually each WordPress post. Important Javascript code, conversion script or custom css codes are not allowed on the free version, they will be removed from the WordPress editor. To insert an header, body, footer or conversion snippet, you can configure one of available shortcode. https://demo.themeinprogress.eu/content-snippet-manager-pro/conversion-shortcodes/ Premium features. Header snippets You can insert your own Javascript and CSS code on the wp_head hook. Body snippets You can insert your own Javascript and CSS code on the wp_body hook. Footer snippets You can insert your own Javascript and CSS code on the wp_footer hook. Conversion snippets You can insert your own Javascript and CSS code inside the final thank you page of WooCommerce. Dynamic conversion values The dynamic conversion values allow you to use specific parameters of a WooCommerce order inside your snippet, when a user has been redirected to the final thank you page. Custom post type support You can include a snippet inside all available custom post types available on WordPress, instead of only the WordPress posts, pages and WooCommerce products. Custom taxonomies support You can include a snippet inside all available custom taxonomies available on WordPress, instead of only the WordPress post categories, tags and WooCommerce categories. Device selection Select one or more devices where you can load the content snippet. User Role If needed, you can hide each snippet for specific user roles, like the administrator. You can get the premium version, from the following link: https://www.themeinprogress.com/content-snippet-manager/ Installation Once you have installed the plugin, you just need to activate the plugin in order to enable it. Configuration Content Snippet Manager will add a new admin page, where you can manage all snippets. Translators Available Languages English (Default) Italiano

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C