CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-63040

WordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerability

Status: Published
Published: 2025-12-31
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Post Snippets post-snippets allows Cross Site Request Forgery.This issue affects Post Snippets: from n/a through <= 4.0.11.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Saad Iqbal Post Snippets

Default version status: unaffected

0 to ≤ 4.0.11affected

References

https://patchstack.com/database/Wordpress/Plugin/post-snippets/vulnerability/wordpress-post-snippets-plugin-4-0-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve ↗