The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

• advisory wordpress.org
• report wpvulndb.com