CVE-2020-8417

PoC —

CVSS 3.1

8.8 high

EPSS

12%p96

Published

Jan 28, 2020 (Jan 28, 2020)

Modified

Jun 17, 2026

Description

The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.

Vendors: codesnippets
Products: code snippets
Ecosystems: WordPress
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (11.9%)

In the news2 stories

600+ installs of WordPress Cookie Consent Plugin vulnerable. Fix it now!

Security AffairsFeb 13, 11:01 UTC · Feb 13, 2020Vulnerability CVE-2020-8417

60

WordPress sites potentially exposed to hack due to Code Snippets flaw

Security AffairsJan 30, 13:56 UTC · Jan 30, 2020Exploit / PoC CVE-2020-8417

60