High · 8.8 CVE-2022-29429 EUVD-2022-33767GHSA-m5g4-r79w-6v6w

WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) leading to Remote Code Execution (RCE) vulnerability

Published May 17, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Remote Code Execution (RCE) in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress via Cross-Site Request Forgery.

Vendor	Product	Affected	Fixed
Alexander Stokmann	Code Snippets Extended (WordPress plugin)	<= 1.4.7 – ≤ 1.4.7	—