<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: code snippets</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-47666: Cross-Site Request Forgery (CSRF) vulnerability in Code Snippets Pro Code Snippets.This issue affects Code Sni</title><link>https://patchthecve.com/cve/CVE-2023-47666.html</link><guid>https://patchthecve.com/cve/CVE-2023-47666.html</guid><pubDate>Wed, 17 Jun 2026 06:33:04 +0000</pubDate><description>MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Code Snippets Pro Code Snippets.This issue affects Code Snippets: from n/a through 3.5.0.</description></item><item><title>CVE-2022-25617: Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin &lt;= 2.14.3 at WordPress via &amp;orderby</title><link>https://patchthecve.com/cve/CVE-2022-25617.html</link><guid>https://patchthecve.com/cve/CVE-2022-25617.html</guid><pubDate>Wed, 17 Jun 2026 04:33:46 +0000</pubDate><description>MEDIUM 4.7: Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin &lt;= 2.14.3 at WordPress via &amp;orderby vulnerable parameter.</description></item><item><title>CVE-2021-25008: The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outpu</title><link>https://patchthecve.com/cve/CVE-2021-25008.html</link><guid>https://patchthecve.com/cve/CVE-2021-25008.html</guid><pubDate>Wed, 17 Jun 2026 03:41:18 +0000</pubDate><description>MEDIUM 6.1: The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue</description></item></channel></rss>