Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts

Vulnerabilities 14Slug insert-phpLatest version 2.7.4WordPress.org →

Minimum safe version

2.7.2

Update to 2.7.2 or later to address 14 fixable vulnerabilities

Latest available2.7.4 ✓
Critical 9.9
2026-03-25< 2.7.2

CVE-2026-25366

CVEWordfence
N/A
2023-06-07< 2.3.10

CVE-2021-4342

CVE
N/A
< 2.4.6

Woody Code Snippets &lt; 2.4.6 - Reflected Cross-Site Scripting

WPScan
N/A
< 2.3.10

Various Affected Software (Various Versions) - Cross-Site Request Forgery Bypass

Wordfence
N/A
2022-06-02< 2.4.6

Woody code snippets <= 2.4.5 - Reflected Cross-Site Scripting

Wordfence
N/A
2022-06-14< 2.4.6

WordPress Woody Code Snippets plugin <= 2.4.5 - Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack
N/A
2019-08-06< 2.2.5

WordPress Woody Ad Snippets plugin <= 2.2.4 - Unauthenticated stored Cross-Site Scripting (XSS) vulnerability

Patchstack
N/A
2020-09-16< 2.3.10

WordPress Woody ad snippets plugin <= 2.3.9 - Cross-Site Request Forgery (CSRF) vulnerability

Patchstack
High 7.5
2019-08-09< 2.2.6

Woody Ad Snippets <= 2.2.5 - Arbitrary Post Deletion

WordfenceCVEWPScan
Medium 5.4
2019-09-15< 2.2.9

WordPress Woody Ad Snippets plugin <= 2.2.7 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

PatchstackCVEWordfenceWPScan