Medium · 4.7 CVE-2022-25617 EUVD-2022-30277GHSA-9c55-9p58-4g75

WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Published May 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.

Vendor	Product	Affected	Fixed
Code Snippets Pro	Code Snippets (WordPress plugin)	<= 2.14.3 – ≤ 2.14.3	—