Code Snippets CPT WordPress Plugin Shortcode Execution Vulnerability

A vulnerability allowing arbitrary shortcode execution has been identified in the Code Snippets CPT plugin for WordPress, affecting all versions through 2.1.0. The issue arises because the plugin permits users to execute actions without proper validation, allowing authenticated attackers with Subscriber-level access or higher to run arbitrary shortcodes.

Impact

Exploitation of this vulnerability allows for arbitrary shortcode execution, which could be used to execute potentially harmful actions or code within the WordPress environment.

Remediation

There is no known patch available for this vulnerability. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.