XplodedThemes vulnerabilities
We track 2 vulnerabilities in XplodedThemes products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest XplodedThemes vulnerabilities
- 8.8 High severity
WPIDE – File Manager & Code Editor: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in XplodedThemes WPIDE – File Manager & Code Editor wpide allows Cross Site Request Forgery.This issue affects WPIDE – File Manager & Code Editor: from n/a through 3.6.4.
- 7.2 High severity
WPIDE – File Manager & Code Editor: Improper Limitation of a Pathname to a Restricted Directory
The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.