wp_editor vulnerabilities

1 known vulnerability in wp_editor from Benjaminrojas. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WP Editor: Deserialization of Untrusted Data

  CVE-2022-2446Sep 13, 2024Benjaminprojas

  The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. This makes it possible for authenticated attackers with administrative privileges to call file