TI-2016-08924 CVE-2016-10886 · GHSA-hf4m-wpq9-6c3x
The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.
Priority MEDIUM 46
The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.
benjaminprojas
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
benjaminprojas records in CISA KEVNo benjaminprojas vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records
TI-2026-03262 CVE-2026-3772 · GHSA-c7hq-c9cq-6m7w
WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor
Priority LOW 39
The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2.
TI-2016-08923 CVE-2016-10885 · GHSA-g7vh-w82q-6c7j
The wp-editor plugin before 1.2.6 for WordPress has CSRF.
Priority LOW 39
The wp-editor plugin before 1.2.6 for WordPress has CSRF.
TI-2025-02882 CVE-2025-3294 · GHSA-xp8f-rxxq-p5wv
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Update
Priority LOW 36
The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all versions up to, and including, 1.2.9.1.
TI-2022-02259 CVE-2022-2446 · GHSA-gm45-ppxv-rfjp
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Priority LOW 34
The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9.
TI-2024-16819 CVE-2024-25591 · GHSA-jcqm-fhp5-5j5j
WordPress WP Editor plugin <=1.2.7 - Sensitive Data Exposure vulnerability
Priority LOW 33
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Benjamin Rojas WP Editor.This issue affects WP Editor: from n/a through 1.2.7.
TI-2021-06443 CVE-2021-24151 · GHSA-85ff-hfw5-g96g
WP Editor < 1.2.7 - Authenticated SQL injection
Priority LOW 33
The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated (admin+) blind SQL injection issue via an arbitrary parameter when making a request to save the sett…
TI-2024-16231 CVE-2024-24700 · GHSA-fgj3-94jj-q56m
WordPress WP Editor plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Rojas WP Editor allows Reflected XSS.This issue affects WP Editor: from n/a through 1.2.8.
TI-2025-02883 CVE-2025-3295 · GHSA-p5jf-h6mx-5w8x
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
Priority LOW 23
The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1.