Back to KEVs

CVE-2020-8417

The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.

Basic Information

CVE State
PUBLISHED
Reserved Date
January 28, 2020
Published Date
January 28, 2020
Last Updated
August 04, 2024
Vendor
n/a
Product
n/a
Description
The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.
Tags
wordpress

CVSS Scores

CVSS v3.1

8.8 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3.0

8.8 - HIGH

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Score

Score
50.31% (Percentile: 97.66%) as of 2025-05-12

Exploit Status

Exploited in the Wild
Yes (2020-01-28 14:27:48 UTC) Source

References

https://wordpress.org/plugins/code-snippets/#developers https://wpvulndb.com/vulnerabilities/10050

Known Exploited Vulnerability Information

Source Added Date
Wordfence 2020-01-28 14:27:48 UTC

Timeline

  • CVE ID Reserved

  • Added to KEVIntel

  • CVE Published to Public