CVE-2008-1059: WordPress Sniplets Plugin

High severity, CVSS 7.5. EPSS: 48.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.

Affected products

• WordPress Sniplets Plugin: version 1.1.2 only; version 1.2.2 only

Published 2008-02-28. Last modified 2026-06-16.