Remote Code Execution Vulnerability in Post Snippets Plugin by WordPress
CVE-2026-56049

8.5HIGH

Key Information:

Vendor

WordPress
Status
Post Snippets
Vendor
CVE Published:
25 June 2026

What is CVE-2026-56049?

A remote code execution vulnerability has been identified in the Post Snippets plugin for WordPress, specifically in versions up to and including 4.0.19. This flaw allows attackers to execute arbitrary code on vulnerable installations, potentially leading to a complete compromise of the affected website. It is essential for users of this plugin to upgrade to the latest version and apply necessary security patches to mitigate risk. Stay vigilant and protect your WordPress site from possible threats.

Affected Version(s)

Post Snippets <= 4.0.19

References

https://patchstack.com/database/wordpress/plugin/post-sni...
vdb-entry

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

daroo | Patchstack Bug Bounty Program
.