Code Snippets < 4.1.0 - Admin+ Network-Scoped Snippet Injection via Snippet Import

Description

The plugin does not verify network-level capabilities before honouring a network-scope parameter on its snippet import routes on multisite, allowing an administrator of a single subsite without network-management rights to create, overwrite and deactivate network-wide snippets belonging to the whole network.