All products

wp-editor

WordPress · Plugin
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File EditorCVE-2026-3772 wp-editor WordPress High Fix reported
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File UpdateCVE-2025-3294 wp-editor WordPress High Fix reported
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File ReadCVE-2025-3295 wp-editor WordPress Medium Fix reported
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR DeserializationCVE-2022-2446 wp-editor WordPress High Fix reported
WP Editor <= 1.2.8 - Reflected Cross-Site ScriptingCVE-2024-24700 wp-editor WordPress Medium Fix reported
WP Editor <= 1.2.7 - Sensitive Information Exposure via log fileCVE-2024-25591 wp-editor WordPress Medium Fix reported
WP Editor <= 1.2.6.2 - Cross-Site ScriptingCVE-2016-10877 wp-editor WordPress Medium Fix reported
WP Editor < 1.2.6 - Cross-Site Request ForgeryCVE-2016-10885 wp-editor WordPress High Fix reported
WP Editor <= 1.2.6.3 - Authenticated (Admin+) SQL injectionCVE-2021-24151 wp-editor WordPress High Fix reported
WP Editor < 1.2.6 - Incorrect Permission Assignment or ProtectionCVE-2016-10886 wp-editor WordPress Critical Fix reported