Skip to content
Sign in
6.8 Medium

CVE-2026-106097 The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using…

Description

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite Administrators, allowing a subsite Administrator who is not a network Super Admin to perform UNION-based SQL injection against shared network tables and disclose network-wide data such as other users' password hashes.

Affected products and versions

Product Affected versions Fixed in
Code Snippets 3.10 earliest → < 3.10.0 3.10.0

Other CVEs of Code Snippets

The 3 CVEs of Code Snippets →
CVE-2026-106095 The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management… 3.3 Low CVE-2021-25008 The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it… Not rated
Track this CVE