NetSight
high8.8

CVE-2020-8417

The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.

Impact

The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.

Affected products

VendorProductAffected versions
CodesnippetsCode Snippets
before 2.14.0

Weakness classification

References