CVE-2026-106095

The Code Snippets WordPress plugin, versions prior to 3.10.0 , is vulnerable to unauthorized snippet management due to a missing capability check . The update_code_snippet action fails to verify permissions and incorrectly derives the network scope from the request rather than the stored record. ...