Authenticated code execution via unchecked snippet update

Remote code execution in WP Extended 3.0.11 and earlier allows remote authenticated users to execute PHP code via a snippet update. The wpext_handle_snippet_update function accepts snippet-content changes without checking the caller's capabilities, so a Subscriber can replace trusted snippet code. Exploitation requires Subscriber-level access and at least one snippet previously created by an administrator; the injected code then runs on the WordPress server.