Skip to content
Heist/ feed
Unrated

Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)

Type: advisorySource: Official CVE List1 source record

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite Administrators, allowing a subsite Administrator who is not a network Super Admin to perform UNION-based SQL injection against shared network tables and disclose network-wide data such as other users' password hashes.

Announced Source revision 1
Original source ↗

CVE-2026-106097

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-106097

Code Snippets

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "Unknown",
    "product": "Code Snippets",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.10.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
Related CVEs
CVE-2026-106097

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#16260 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement