CVE-2025-13035 | Code Snippets Plugin up to 3.9.1 on WordPress extract filepath code injection

SecurityVulns
Yanac

A vulnerability described as critical has been identified in Code Snippets Plugin up to 3.9.1 on WordPress. Impacted is the function extract. Such manipulation of the argument filepath leads to code injection.

This vulnerability is documented as CVE-2025-13035. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More