Threats tagged 'ghsa-c7f6-69qw-8mmr'

The Code Snippets WordPress plugin versions prior to 4.1.0 have a vulnerability in multisite environments where network-level capability checks are not performed on snippet import routes. This allows a subsite administrator without network-management rights to create, overwrite, or deactivate network-wide snippets affecting the entire network.