Mndpsingh287 vulnerabilities
We track 8 vulnerabilities in Mndpsingh287 products across 4 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on April 8, 2026.
Latest Mndpsingh287 vulnerabilities
- 9.6 Critical severity
Theme Editor: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in mndpsingh287 Theme Editor theme-editor allows Code Injection.This issue affects Theme Editor: from n/a through <= 3.2.
- 7.1 High severity
WP Mail: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mndpsingh287 WP Mail wp-mail allows Reflected XSS.This issue affects WP Mail: from n/a through <= 1.3.
- 8.8 High severity
Theme Editor: Cross-Site Request Forgery
The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0. This is due to missing or incorrect nonce validation on the 'theme_editor_theme' page. This makes it possible for unauthenticated attac
- 7.1 High severity
Track Page Scroll: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mndpsingh287 Track Page Scroll track-page-scroll allows Reflected XSS.This issue affects Track Page Scroll: from n/a through <= 1.0.2.
- 7.2 High severity
Theme Editor: Deserialization of Untrusted Data
The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to, and including 2.8. This makes it possible for authenticated attackers with administrative privileges to call files usi
- 8.8 High severity
File Manager: Cross-Site Request Forgery
The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.2.4. This is due to missing or incorrect nonce validation on the wp_file_manager page that includes files through the 'lang' parameter. Th
- 9.9 Critical severity
File Manager: Improper Limitation of a Pathname to a Restricted Directory
The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7.2.1 (free version) and 8.3.4 (Pro version) via the target parameter in the mk_file_folder_manager_action_callback_short
- 7.5 High severity
File Manager: Use of Insufficiently Random Values
The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to insufficient randomness in the backup filenames, which use a timestamp plus 4 random digits. This makes it possible for una