CVE-2026-2723Disclosure

LOWCVSS 6.1 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Post Snippits plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings page handlers for saving, adding, and deleting snippets. This makes it possible for unauthenticated attackers to modify plugin settings and inject malicious scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-352

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds201d
Disclosure
CVE-2026-2723 Cross-Site Request Forgery in Post Snippits WordPress Plug... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2723 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces CVE‑2026‑2723 as a Cross‑Site Request Forgery flaw in a WordPress plugin and directs readers to a vulnerability details page, but provides no evidence of exploitation or patch information.
0000035
4.0K followersView on X
CVE@CVEnew201d
Disclosure
CVE-2026-2723 The Post Snippits plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on… https://www.cve.org/CVERecord?id=CVE-2026-2723
Post summary
The Post Snippits plugin for WordPress is disclosed as vulnerable to CSRF due to missing nonce validation, affecting all versions up to 1.0.
0000039
56.8K followersView on X

Explore more

Back to dashboard