Code Injection Vulnerability in MainWP Code Snippets Extension

CVE-2023-23645

Summary

An improper control of code generation vulnerability exists in the MainWP Code Snippets Extension, which could allow unauthorized actors to execute arbitrary PHP code and potentially compromise the security of WordPress sites. The vulnerability affects versions of MainWP Code Snippets Extension from n/a through 4.0.2, emphasizing a need for prompt updates to mitigate risks associated with code injection exploitation.

References