Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-29435 EUVD-2022-33773GHSA-fx9c-g9f5-59gr

WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability

Published May 17, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress allows an attacker to delete or to turn on/off snippets.

Affected products

VendorProductAffectedFixed
Alexander Stokmann Code Snippets Extended (WordPress plugin) <= 1.4.7 – ≤ 1.4.7 —

References