Read the docs

wp-super-edit

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

wp-super-edit records in CISA KEV

No wp-super-edit vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 81

WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00598 Published 2026-05-15 No fix listed CWE-434
Open these records in search →