Insert PHP Code Snippet

Insert PHP Code Snippet has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.8 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 3 issues recorded for Insert PHP Code Snippet has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Insert PHP Code Snippet is installed on roughly 90,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

4.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Insert PHP Code Snippet vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.8CVE-2024-7420

Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion

Read the full analysis

Vulnerability Records

3 records


2025-10-27 00:00	Insert PHP Code Snippet <= 1.4.3 - Missing Authorization Insert PHP Code Snippet <= 1.4.3	`CVE-2025-64356`	4.3 Medium	Bao - BlueRock	Yes
2024-08-14 14:04	Insert PHP Code Snippet <= 1.3.6 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion Insert PHP Code Snippet <= 1.3.6	`CVE-2024-7420`	5.8 Medium	vgo0	Yes
2024-02-09 00:00	Insert PHP Code Snippet <= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting Insert PHP Code Snippet <= 1.3.4	`CVE-2024-0658`	4.4 Medium	Felipe Restrepo Rodriguez (pfelilpe)	Yes

Showing 1–3 of 3 reports

Latestv1.4.7

Insert PHP Code Snippet

Author

f1logic

4.9(706)

98/100

Last Updated

2026-06-22 (3mo ago)

Active Installs

90,000+

Downloads

1,701,847

Requires WP

Requires PHP

Tested up to

WP 7.0.4

Created

2013-09-16 (13y ago)

A quicklook into Insert PHP Code Snippet ★ Convert PHP snippets to shortcodes ★ Insert PHP code easily using shortcode ★ Support for PHP snippet shortcodes in widgets ★ Dropdown menu in TinyMCE editor to pick snippet shortcodes easily Features in Detail Insert PHP Code Snippet allows you to create shortcodes corresponding to PHP code snippets. You can create a shortcode corresponding to any random PHP code such as ad codes, login validation etc. and use the same in your posts, pages or widgets. The shortcodes generated using the plugin are easily available as a dropdown in the standard wordpress content editor as well as in widget settings, thereby giving you ease of integrating your PHP snippets with your posts and pages. About Insert PHP Code Snippet is developed and maintained by XYZScripts. For any support, you may contact us. ★ Insert PHP Code Snippet User Guide ★ Insert PHP Code Snippet FAQ More Information ★ Insert PHP Code Snippet User Guide ★ Insert PHP Code Snippet FAQ Troubleshooting Please read the FAQ first if you are having problems. Requirements WordPress 5.0+ PHP 7+ Feedback We would like to receive your feedback and suggestions. You may submit them at our support desk.

View on WordPress.org