Skip to content
OpenAdvisories

Product · Saad Iqbal

Post Snippets – Custom WordPress Code Snippets Customizer

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-77871

    Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 4.2.4 due to insufficient input sanitization and output escaping. Th…

    Saad Iqbal Post Snippets – Custom WordPress Code Snippets Customizer Web / CMS
  • Medium 4.4
    CVE-2026-7430

    Post Snippets <= 4.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import

    The Post Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.0.19. This is due to insufficient output escaping of imported snippet content when rendering JavaScript variables in the post editor. S…

    Saad Iqbal Post Snippets – Custom WordPress Code Snippets Customizer Web / CMS