Benjaminprojas vulnerabilities
We track 3 vulnerabilities in Benjaminprojas products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2026.
Latest Benjaminprojas vulnerabilities
- 8.8 High severity
WP Editor: Cross-Site Request Forgery
The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2. This is due to missing nonce verification in the 'add_plugins_page' and 'add_themes_page' functions. This makes it possible for unauth
- 7.2 High severity
WP Editor: Improper Limitation of a Pathname to a Restricted Directory
The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all versions up to, and including, 1.2.9.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to overw
- 7.2 High severity
WP Editor: Deserialization of Untrusted Data
The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. This makes it possible for authenticated attackers with administrative privileges to call file