Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-106095— Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippet

Quick assessment

Affected
Unknown Code Snippets
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress插件“Code Snippets”在3.10.0版本之前，在某个片段管理操作中未执行权限检查，并且它根据请求来确定目标片段的网络作用域，而不是从存储的记录中获取。这导致多站点网络中单个子站的管理员可以激活、停用和重新排序作用于整个网络的所有站点的网络级片段。

AI Predicted 8.8 Difficulty: Easy

Possible ATT&CK Techniques 1 AI

T1098.004 · SSH Authorized Keys
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-106095

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippet
Source: CVE Program / CVE List V5
Vulnerability Description
The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management actions and derives the network scope of the targeted snippet from the request instead of from the stored record, allowing an administrator of a single subsite on a multisite network to activate, deactivate and reprioritise network-scoped snippets that run across every site in the network.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Unknown Code Snippets 0 ~ 3.10.0 -

II. Public POCs for CVE-2026-106095

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-106095

请登录查看更多情报信息。

Other References for CVE-2026-106095 (1)

Same Patch Batch · Unknown · 2026-10-09 · 11 CVEs total

CVE-2026-84220 4.8 MEDIUM Kirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection
CVE-2026-84224 4.1 MEDIUM Kirki < 6.3.2 - Editor+ Blind SSRF via Remote Template URL
CVE-2026-106097 Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Creden
CVE-2026-93548 FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation
CVE-2026-87841 UnitechPay <= 1.0.6.3 - Unauthenticated Order Payment Bypass via Unsigned Webhook
CVE-2026-92990 SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded T
CVE-2026-88931 Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update
CVE-2026-86850 SKU Error Fixer for WooCommerce <= 1.0 - Unauthenticated Orphaned Product Variation Deleti
CVE-2025-15700 AWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP Import
CVE-2026-92989 SendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing

IV. Related Vulnerabilities

Same product: Code Snippets
Same vendor: Unknown

V. Comments for CVE-2026-106095

No comments yet

Leave a comment