CVE-2022-29436

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2022
Source publication: May 17, 2022
Source updated: Apr 28, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Persistent Cross-Site Scripting (XSS)

Persistent Cross-Site Scripting (XSS) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress via Cross-Site Request Forgery (vulnerable parameters &title, &snippet_code).

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Code Snippets Extended (WordPress plugin)

Vendor: Alexander Stokmann
Product: Code Snippets Extended (WordPress plugin)
Platforms: Unknown
Default status: Unknown

Code Snippets Extended (WordPress plugin) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
<= 1.4.7	`affected`	custom	Unavailable	1.4.7	None listed