3.3
Faible
CVE-2026-106095 The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management…
Description
The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management actions and derives the network scope of the targeted snippet from the request instead of from the stored record, allowing an administrator of a single subsite on a multisite network to activate, deactivate and reprioritise network-scoped snippets that run across every site in the network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Code Snippets 3.10 | premières → < 3.10.0 | 3.10.0 |