CVE-2021-25010

CRITICAL 9.6CVE-2021-25010 · Published 28/02/2022 · updated 17/06/2026

In short

CVE-2021-25010 is a CRITICAL (CVSS 9.6) vulnerability affecting post snippets (postsnippets).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.5% of all vulnerabilities.
Fix: update to 3.1.4 or later.

Package	Affected versions	Patched versions
post snippets postsnippets	`< 3.1.4`	`3.1.4`

Description

The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets. Furthermore, imported snippers are not sanitised and escaped, which could lead to Stored Cross-Site Scripting issues

References

wpscan.com/vulnerability/d1ebd15a-72ab-4ba2-a212-7e2eea0b0fb0 · Exploit

CVE-2021-25010

In short

Description

References

More vulnerabilities in post snippets

CVE-2021-25010

In short

Description

References

More vulnerabilities in post snippets