CVE-2023-23645

Severity

CRITICAL

CVSS

9.9

EPSS

0.00983

Risk score

39.94

CISA KEV

PoC

Published

2024-05-17

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2023-27732, GHSA-9MXJ-V3X9-FJFR

Products

mainwp:MainWP Code Snippets Extension n/a ≤4.0.2

Sources

euvd EUVD-2023-27732

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in MainWP MainWP Code Snippets Extension allows Code Injection.This issue affects MainWP Code Snippets Extension: from n/a through 4.0.2.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-27732
https://patchstack.com/database/vulnerability/mainwp-code-snippets-extension/wordpress-mainwp-code-snippets-extension-plugin-4-0-2-subscriber-arbitrary-php-code-injection-execution-vulnerability?_s_id=cve