Code Snippets Plugin Privilege Escalation via Network-Scope Manipulation

Executive Summary

The Code Snippets WordPress plugin before version 3.10.0 has a flaw where it does not check if an administrator has the proper permissions before allowing them to manage network-scoped snippets. Instead, it relies on the request to determine the scope, letting a single subsite admin activate, deactivate, or change the priority of snippets that run across the entire network.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the Code Snippets plugin. If it is below 3.10.0, the system is vulnerable. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files directly.

Useful 0 Not Useful 0

Impact Analysis

If you are an administrator on a single site within a WordPress multisite network using an outdated Code Snippets plugin, an attacker with admin access to your subsite could manipulate network-wide snippets. This could lead to unauthorized code execution, data breaches, or disruption of services across all sites in the network.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access or modifications across a network, potentially violating data protection requirements under GDPR or HIPAA. Unauthorized code execution might expose sensitive data or disrupt compliance controls, increasing legal and regulatory risks.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Code Snippets plugin to version 3.10.0 or later immediately. Remove admin access for untrusted users on subsites in a multisite network until the update is applied.

Useful 0 Not Useful 0