CVE-2023-23645

CRITICAL 9.9CVE-2023-23645 · Published 17/05/2024 · updated 17/06/2026

In short

CVE-2023-23645 is a CRITICAL (CVSS 9.9) vulnerability affecting code snippets extension (mainwp).
Chance of exploitation in the next 30 days (EPSS): 0.97%, higher than 62.1% of all vulnerabilities.
Fix: update to 4.0.3 or later.

Package	Affected versions	Patched versions
code snippets extension mainwp	`< 4.0.3`	`4.0.3`

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in MainWP MainWP Code Snippets Extension allows Code Injection.This issue affects MainWP Code Snippets Extension: from n/a through 4.0.2.

References

patchstack.com/database/vulnerability/mainwp-code-snippets-extension/wordpress-mainwp-code-snippets-extension-plugin-4-0-2-subscriber-arbitrary-php-code-injection-execution-vulnerability · Third Party Advisory

More vulnerabilities in code snippets extension

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free