Code Snippets
Healthy: vulnerability published 7 Oct 2026, fixed in 3.10.0.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 75 |
| Support | 77 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 7 Oct 2026, fixed in 3.10.0. Update to version 3.10.0 or later.7 Oct 2026Evidence
- WarningSEC-1Vulnerability published 7 Oct 2026, fixed in 3.10.0. Update to version 3.10.0 or later.7 Oct 2026Evidence
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| bungeshea | 13 Jun 2012 to 12 Aug 2026, 344 commits |
|---|---|
| codesnippetspro | 16 Oct 2025 to 21 Oct 2026, 54 commits |
| 0aksmith | 21 Oct 2025 to 20 Oct 2026, 5 commits |
3 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 14 days ago
- Releases, 24 months
- 33
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 0 |
| Q4 2024 | 2 |
| Q1 2025 | 2 |
| Q2 2025 | 0 |
| Q3 2025 | 4 |
| Q4 2025 | 13 |
| Q1 2026 | 2 |
| Q2 2026 | 2 |
| Q3 2026 | 6 |
| Q4 2026 | 2 |
Last release 21 Oct 2026. Tested with WordPress 7.1 (current).
Support
77% of 22 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 7 Oct 2026 | Code Snippets <= 3.9.0 - Missing Authorization | 2.7 | <= 3.9.0 | 3.10.0 | 0 |
| 7 Oct 2026 | Code Snippets <= 3.9.0 - Authenticated (Administrator+) SQL Injection | 4.9 | <= 3.9.0 | 3.10.0 | 0 |
| 5 Feb 2026 | Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions | 4.3 | <= 3.9.4 | 3.9.5 | 0 |
| 18 Nov 2025 | Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains | 8 | <= 3.9.1 | 3.9.2 | 0 |
| 6 Nov 2023 | Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load | 5.4 | < 3.6.0 | 3.6.0 | 1 |
| 18 May 2022 | Code Snippets <= 2.14.3 - Reflected Cross-Site Scripting | 4.7 | <= 2.14.3 | 2.14.4 | 0 |
| 27 Dec 2021 | Code Snippets <= 2.14.2 - Reflected Cross-Site Scripting | 6.1 | < 2.14.3 | 2.14.3 | 129 |
| 29 Jan 2020 | Code Snippets <= 2.13.3 - Cross-Site Request Forgery to Remote Code Execution | 8.8 | <= 2.13.3 | 2.14.0 | 406 |
| 24 Jul 2016 | Code Snippets < 2.7.0 - Reflected Cross-Site Scripting | 6.1 | < 2.7.0 | 2.7.0 | 1866 |
Source: Wordfence Intelligence.
Reputation
| Q4 2025 | 4.6 |
|---|---|
| Q1 2026 | 4.9 |
| Q2 2026 | 5.0 |
| Q3 2026 | 4.5 |
| Q4 2026 | 5.0 |
Average rating rose from 4.6 to 5.0 between Q4 2025 and Q4 2026.
| 5 star | 454 |
|---|---|
| 4 star | 13 |
| 3 star | 7 |
| 2 star | 7 |
| 1 star | 29 |
- The free plan is very limited · 2 stars · 28 Oct 2025
Momentum
1,000,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 56,873 |
|---|---|
| 11 May 2026 | 99,418 |
| 18 May 2026 | 137,539 |
| 25 May 2026 | 65,831 |
| 1 Jun 2026 | 55,885 |
| 8 Jun 2026 | 52,970 |
| 15 Jun 2026 | 66,417 |
| 22 Jun 2026 | 57,736 |
| 29 Jun 2026 | 50,410 |
| 6 Jul 2026 | 49,952 |
| 13 Jul 2026 | 56,025 |
| 20 Jul 2026 | 56,776 |
| 27 Jul 2026 | 69,118 |
| 3 Aug 2026 | 65,540 |
| 10 Aug 2026 | 52,950 |
| 17 Aug 2026 | 54,671 |
| 24 Aug 2026 | 928,677 |
| 31 Aug 2026 | 637,774 |
| 7 Sep 2026 | 153,401 |
| 14 Sep 2026 | 155,182 |
| 21 Sep 2026 | 118,293 |
| 28 Sep 2026 | 83,760 |
| 5 Oct 2026 | 81,351 |
| 12 Oct 2026 | 575,046 |
| 19 Oct 2026 | 170,333 |
| 26 Oct 2026 | 181,373 |
| 2 Nov 2026 | 17,757 |
Weekly downloads over the last 4 weeks are 54% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 4.0.0 |
|---|---|
| Author | Code Snippets Pro |
| Added | 13 Jun 2012 |
| Last updated | 21 Oct 2026 |
| Active installs | 1,000,000+ |
| Requires WordPress | 5.5 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Developer Tools & Customization > Code Snippets & Custom Code |
| Tags | php, code, snippets, functions, multisite |
Questions
Is Code Snippets still maintained?
Code Snippets was last updated on 21 Oct 2026. Its Canary status is Healthy.
Is Code Snippets safe?
Code Snippets has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Code Snippets?
The wordpress.org author is Code Snippets Pro. Recent committers: codesnippetspro, 0aksmith, bungeshea, plugin-master. We have recorded no ownership change.
What can I use instead of Code Snippets?
Plugins in the same category with a higher Canary Score: Shortcoder - Create Shortcodes for Anything, FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager, Simple Custom CSS and JS, Insert Headers And Footers, Visual CSS Style Editor.