VendorsBenjamin Rojaswp_editorany version
Vulnerabilities

Benjamin Rojas WP Editor any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2016-10886
The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.
Published 2019-08-14 · Modified
9.8EPSS 0.020
CVE-2016-10885
The wp-editor plugin before 1.2.6 for WordPress has CSRF.
Published 2019-08-14 · Modified
8.8EPSS 0.007
CVE-2024-25591
WordPress WP Editor plugin <=1.2.7 - Sensitive Data Exposure vulnerability
Published 2024-03-17 · Modified
7.5EPSS 0.005
CVE-2025-3294
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Update
Published 2025-04-17 · Analyzed
7.2EPSS 0.010
CVE-2021-24151
WP Editor < 1.2.7 - Authenticated SQL injection
Published 2024-01-16 · Modified
7.2EPSS 0.008
CVE-2022-2446
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Published 2024-09-13 · Analyzed
7.2EPSS 0.006
CVE-2025-3295
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
Published 2025-04-17 · Analyzed
4.9EPSS 0.005