Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
woody_ad_snippets - Remote Code Execution (CVE-2024-3105)
The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.5.0 via the 'insert_php' shortcode. This is due to the plugin not restricting the usage of the functionality to high level authorized users. This makes it possible for authenticated attackers, with contributor-level access and above, to execute code on the server.
PLUGIN
woody_ad_snippets
CVE-2024-3105
Risk Score
Threat Entry
Updated 2026-06-17
Woody Ad Snippets - Cross-Site Scripting (XSS) (CVE-2019-16289)
The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.
PLUGIN
Woody Ad Snippets
CVE-2019-16289
Risk Score
Threat Entry
Updated 2026-06-17
Woody Ad Snippets - Remote Code Execution (CVE-2019-15858)
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.
PLUGIN
Woody Ad Snippets
CVE-2019-15858
Risk Score
Threat Entry
Updated 2026-06-17
Woody Ad Snippets - Security Vulnerability (CVE-2019-14773)
admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion.
PLUGIN
Woody Ad Snippets
CVE-2019-14773
Risk Score