Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Code Snippets 3.10.0 Clear all filters
TI-2026-69860 CVE-2026-106097 · GHSA-6xh4-5cg9-76mq

SQL injection in Code Snippets plugin exposes network-wide credentials

Priority LOW 30

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user h…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00231 Published 2026-10-09 Fixed in 3.10.0 CWE-89
TI-2026-69859 CVE-2026-106095 · GHSA-x27w-vpmw-g569

Network-scoped snippet activation flaw in Code Snippets WordPress plugin

Priority LOW 15

The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management actions and derives the network scope of the targeted snippet from the request instead of from the sto…

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00159 Published 2026-10-09 Fixed in 3.10.0 CWE-862