Post Snippets – Custom WordPress Code Snippets Customizer

Post Snippets – Custom WordPress Code Snippets Customizer has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 9 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 9.6 out of 10. Severity breakdown: 1 critical and 3 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (33%). Other recurring categories include Code Injection, Cross-Site Request Forgery (CSRF).

Every one of the 9 issues recorded for Post Snippets – Custom WordPress Code Snippets Customizer has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, one record each. Post Snippets – Custom WordPress Code Snippets Customizer is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.8/ 10
Patch Coverage100%
Open

0

Fixed

9

Get automatic notifications for all Post Snippets – Custom WordPress Code Snippets Customizer vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.6CVE-2021-25010

Post Snippets <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

9 records
Showing 1–9 of 9 reports
Post Snippets – Custom WordPress Code Snippets Customizer banner
Latestv4.2.4

Post Snippets – Custom WordPress Code Snippets Customizer

Saad Iqbal

Author

Saad Iqbal

4.6(93)
92/100
Last Updated
2026-08-20 (25d ago)
Active Installs
20,000+
Downloads
896,129
Requires WP
5.3+
Requires PHP
8.0+
Tested up to
WP 7.1
Created
2009-03-23 (18y ago)

Create custom shortcodes and reusable content and insert them in into your posts and pages. Post Snippets lets you build a library with snippets of HTML, PHP code or reoccurring text that you often use in your posts and pages. You can use predefined variables to replace parts of the snippet on insert. All snippets are available in the post editor via a button in the Visual mode. The snippet can be inserted as defined, or as a shortcode to keep flexibility for updating the snippet. PHP code is supported for snippets inserted as shortcodes. Basic Features Insert All defined snippets is inserted from a button directly in the post editor. Shortcodes You can use this plugin to create your own custom shortcodes. PHP A shortcode snippet can optionally be processed as PHP code. Buttons The snippets can be found in the (visual) WordPress editor with a button and in the HTML editor with a quicktag. User-friendly Easy to use &#8216;Manage Snippets’ page where you can add, edit and remove snippets. Variables Each snippet can have as many custom variables as you like, which can be used on insert. Import/Export Snippets can be imported and exported between sites. Documentation Full documentation is available directly from the help panel in the plugin (top right in WordPress). Uninstall If you delete the plugin from your plugins panel it cleans up all data it has created in the WordPress database. AI Chatbot Integration A built-in AI assistant to help you write and debug snippets directly from the post editor settings and custom code pages. Premium Features Snippet duplication Easily duplicate shortcode snippets and insert them into posts and pages. Rich Text Editor Use Post Snippets’ built-in Rich Text editor to customize your snippets however you want. Snippets Order Change the order of your snippets simply by using the drag and drop functionality. Rest API Allow anyone the right to add, edit, update and delete any snippet without providing them admin access. Tags Use the tags feature to add multiple tags and filter different snippets by using tags. Cloud snippet Save, edit, download, and delete snippets directly on the cloud by using the cloud snippets feature. Gutenberg Block Editor Support Gutenberg block types can support any number of built-in core features such as name, icon, description, category and more. Snippet type Display the snippet types (PHP, JS, CSS) by adding a column in the snippet listing page. The Gutenberg editor integrates source code snippets block to insert and preview selected snippet’s code on the front-end without execution. Elementor editor adds a post-snippet block for inserting snippets with PHP execution, formatting, shortcode support, and a Post Snippet source block to showcase snippet source code. Technical Documentation To obtain more information, including instructions for plugin installation, we recommend referring to our technical documentation page on Post Snippets. Additionally, to stay informed about the latest plugin updates, enhancements, and relevant news, you can always visit our Post Snippets blog. Support To get your queries resolved related to Post Snippets, you can always take help from WordPress Support. Pricing Plans Post Snippets offers budget-friendly pricing options that complement your business needs. See the pricing plan details here.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C