Skip to content
OpenAdvisories
Critical · 9.9 CVE-2023-23645 EUVD-2023-27732GHSA-9mxj-v3x9-fjfr

WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution Vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: mainwp Product: MainWP Code Snippets Extension

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in MainWP MainWP Code Snippets Extension allows Code Injection.This issue affects MainWP Code Snippets Extension: from n/a through 4.0.2.

Affected products

VendorProductAffectedFixed
MainWP MainWP Code Snippets Extension ≤ 4.0.2 —

References