WordPress Post Snippets Plugin Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in the WordPress Post Snippets plugin, specifically in versions through 4.0.12. This vulnerability arises from improper control over code generation, allowing for remote code inclusion.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected website, potentially allowing an attacker to gain backdoor access and full control over the site.

Remediation

Users of the WordPress Post Snippets plugin should update to version 4.0.13 or later. Patchstack users can enable auto-updates for vulnerable plugins.

Added: Mar 25, 2026, 8:55 PM
Updated: Mar 25, 2026, 8:55 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
10.0
exploitability
5.4
remediation
7.9
relevance
4.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.