Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
wp-editor
WordPress
· Plugin
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor
CVE-2026-3772
wp-editor
WordPress
High
Fix reported
2026-05-01
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Update
CVE-2025-3294
wp-editor
WordPress
High
Fix reported
2025-04-17
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
CVE-2025-3295
wp-editor
WordPress
Medium
Fix reported
2025-04-17
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
CVE-2022-2446
wp-editor
WordPress
High
Fix reported
2024-09-13
WP Editor <= 1.2.8 - Reflected Cross-Site Scripting
CVE-2024-24700
wp-editor
WordPress
Medium
Fix reported
2024-05-07
WP Editor <= 1.2.7 - Sensitive Information Exposure via log file
CVE-2024-25591
wp-editor
WordPress
Medium
Fix reported
2024-02-15
WP Editor <= 1.2.6.2 - Cross-Site Scripting
CVE-2016-10877
wp-editor
WordPress
Medium
Fix reported
2024-01-22
WP Editor < 1.2.6 - Cross-Site Request Forgery
CVE-2016-10885
wp-editor
WordPress
High
Fix reported
2024-01-22
WP Editor <= 1.2.6.3 - Authenticated (Admin+) SQL injection
CVE-2021-24151
wp-editor
WordPress
High
Fix reported
2024-01-22
WP Editor < 1.2.6 - Incorrect Permission Assignment or Protection
CVE-2016-10886
wp-editor
WordPress
Critical
Fix reported
2024-01-22