WordPress plugin

Post Snippets – Custom WordPress Code Snippets Customizer security & vulnerabilities

Q: Does Post Snippets – Custom WordPress Code Snippets Customizer have known vulnerabilities?

Yes. VulnCrest Radar lists 11 known vulnerabilities in Post Snippets – Custom WordPress Code Snippets Customizer: 1 critical, 3 high, 7 medium. At least one is not fixed in the latest version.

Q: How do I check which version of Post Snippets – Custom WordPress Code Snippets Customizer I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Post Snippets – Custom WordPress Code Snippets Customizer vulnerability?

CVE-2026-77871, published Oct 27, 2026: Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes. Severity: Medium (CVSS 6.4).

Q: Is any Post Snippets – Custom WordPress Code Snippets Customizer vulnerability listed in CISA KEV?

No. None of the known Post Snippets – Custom WordPress Code Snippets Customizer vulnerabilities is currently listed in the CISA KEV catalog.

post-snippets— active installsLast vulnerability Oct 27, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

11Known vulnerabilities

Critical1
High3
Medium7
Low0

Vulnerabilities per year

All Post Snippets – Custom WordPress Code Snippets Customizer vulnerabilities

Post Snippets – Custom WordPress Code Snippets Customizer vulnerabilities
Severity	Vulnerability	CVE	Published
High8.8	Authenticated (Contributor+) Remote Code Execution ≤4.0.19Update to 4.1.0	CVE-2026-56049	Jun 25
High8.8	Authenticated (Contributor+) Remote Code Execution ≤4.0.12Update to 4.0.13	CVE-2026-25001	Mar 16
Critical9.6	Cross-Site Request Forgery to Stored Cross-Site Scripting ≤3.1.3Update to 3.1.4	CVE-2021-25010	Jan 31, 2022
High8.8	Missing Authorization to Arbitrary Options Update <3.1.7Update to 3.1.7	—	Feb 25, 2019

High8.8
Authenticated (Contributor+) Remote Code Execution
≤4.0.19Update to 4.1.0
CVE-2026-56049Jun 25
High8.8
Authenticated (Contributor+) Remote Code Execution
≤4.0.12Update to 4.0.13
CVE-2026-25001Mar 16
Critical9.6
Cross-Site Request Forgery to Stored Cross-Site Scripting
≤3.1.3Update to 3.1.4
CVE-2021-25010Jan 31, 2022
High8.8
Missing Authorization to Arbitrary Options Update
<3.1.7Update to 3.1.7
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0Feb 25, 2019

Post Snippets – Custom WordPress Code Snippets Customizer: common questions

Does Post Snippets – Custom WordPress Code Snippets Customizer have known vulnerabilities?

Yes. VulnCrest Radar lists 11 known vulnerabilities in Post Snippets – Custom WordPress Code Snippets Customizer: 1 critical, 3 high, 7 medium. At least one is not fixed in the latest version.

How do I check which version of Post Snippets – Custom WordPress Code Snippets Customizer I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Post Snippets – Custom WordPress Code Snippets Customizer vulnerability?

CVE-2026-77871, published Oct 27, 2026: Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes. Severity: Medium (CVSS 6.4).

Is any Post Snippets – Custom WordPress Code Snippets Customizer vulnerability listed in CISA KEV?

No. None of the known Post Snippets – Custom WordPress Code Snippets Customizer vulnerabilities is currently listed in the CISA KEV catalog.