CyberRota Analysis
AI-GeneratedThe Code Snippets WordPress plugin prior to version 3.10.0 lacks proper capability checks, enabling an administrator of a single subsite within a multisite network to manipulate network-scoped snippets across all sites. This vulnerability could lead to unauthorized changes to critical snippets, potentially compromising the security and functionality of the entire network. WordPress administrators managing multisite installations should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management actions and derives the network scope of the targeted snippet from the request instead of from the stored record, allowing an administrator of a single subsite on a multisite network to activate, deactivate and reprioritise network-scoped snippets that run across every site in the network.