CVE-2023-47666: WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)
First published: Sat Nov 18 2023(Updated: )
Cross-Site Request Forgery (CSRF) vulnerability in Code Snippets Pro Code Snippets.This issue affects Code Snippets: from n/a through 3.5.0.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Code Snippets Code Snippets | <=3.5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-47666?
CVE-2023-47666 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Code Snippets Plugin version 3.5.0 and below.
What is the severity of CVE-2023-47666?
CVE-2023-47666 has a severity rating of 8.8 (high).
How does CVE-2023-47666 affect Code Snippets Plugin?
CVE-2023-47666 allows attackers to perform Cross-Site Request Forgery (CSRF) attacks on websites using the Code Snippets Plugin version 3.5.0 and below.
How can I fix CVE-2023-47666?
To fix CVE-2023-47666, update the Code Snippets Plugin to a version higher than 3.5.0.
Is there any additional reference material on CVE-2023-47666?
Yes, you can find additional information on the vulnerability at this link: [https://patchstack.com/database/vulnerability/code-snippets/wordpress-code-snippets-plugin-3-5-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve](https://patchstack.com/database/vulnerability/code-snippets/wordpress-code-snippets-plugin-3-5-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve)
- collector/mitre-cve
- collector/nvd-api
- vendor/code snippets
- product/code snippets
- canonical/code snippets code snippets