Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts
2 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 4.3
Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass
The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.9. This is due to missing or incorrect nonce validation on the runActions() function. This makes it possible for unauthenticated att…