Elastic Theme Editor vulnerabilities

1 known vulnerability in Elastic Theme Editor from Koopersmith. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Elastic Theme Editor: Improper Control of Generation of Code

  CVE-2025-12637Nov 11, 2025Koopersmith

  The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the process_theme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with S