CVE-2026-106095

The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management actions and derives the network scope of the targeted snippet from the request instead of from the stored record, allowing an administrator of a single subsite on a multisite...

PT-2022-9565

Name of the Vulnerable Software and Affected Versions Code Snippets WordPress plugin versions prior to 2.14.3 Description The issue is related to a Reflected Cross-Site Scripting problem. This occurs because the snippets-safe-mode parameter is not properly escaped before being outputted back in...