Unknown Post Snippets vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Post Snippets, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.6CVE-2021-25010postsnippetspost_snippets+2
EPSS score
0.61%
The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets. Furthermore, imported snippers are not sanitised and escaped, which could lead to Stored Cross-Site Scripting issues6.8CVE-2026-12980unknownpost snippets+1
EPSS score
0.29%
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.