Input validation vulnerability in Code Snippets 3.6.0

The Code Snippets plugin for WordPress is vulnerable to a type of attack known as Cross-Site Request Forgery. This type of attack can be used by unauthenticated attackers to reset plugin settings on a website if they can get the website administrator to click on a malicious link. All versions of the plugin, up to and including version 3.5.0, are vulnerable to this attack because they do not have the right kind of protection (called a “nonce validation”) on the “load” function.