TI-2025-02153 CVE-2025-2478 · GHSA-fhp2-m3jw-v6c4
Code Clone <= 0.9 - Authenticated (Administrator+) SQL Injection via snippetId Parameter
Priority LOW 23
The Code Clone plugin for WordPress is vulnerable to time-based SQL Injection via the ‘snippetId’ parameter in all versions up to, and including, 0.9 due to insufficient escaping on the user supplied parameter and lack o…