Cross-Site Request Forgery Leading to Code Execution in Code Snippets Import Menu

Skrevet den af i Code Snippets

Code Snippets before 2.14.0 processed snippet import uploads without checking a nonce, so a malicious page visited by a logged-in administrator could silently import attacker-supplied snippets. Because snippets are PHP code that the plugin runs, this leads to remote code execution on the site. Fixed in 2.14.0.

This vulnerability affects the following application versions:

  • Code Snippets 2.10.0
  • Code Snippets 2.10.1
  • Code Snippets 2.12.0
  • Code Snippets 2.12.1
  • Code Snippets 2.13.0
  • Code Snippets 2.13.1
  • Code Snippets 2.13.2
  • Code Snippets 2.13.3