CVE-2008-1060: WordPress Sniplets Plugin

High severity, CVSS 7.5. EPSS: 44.2% chance of exploitation in the next 30 days.

Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter.

Affected products

• WordPress Sniplets Plugin: version 1.1.2 only; version 1.2.2 only

Published 2008-02-28. Last modified 2026-06-16.