CVE-2026-106097 — Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)

Description (CNA)

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite Administrators, allowing a subsite Administrator who is not a network Super Admin to perform UNION-based SQL injection against shared network tables and disclose network-wide data such as other users' password hashes.

Affected (CNA)

Vendor / product	Versions
Unknown / Code Snippets	affected 0 before 3.10.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/f5206366-2e9c-42d5-90b9-ddfaf39aa02f/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.