Advisories · Technology
benjaminprojas WP Editor.
Every CVE that names benjaminprojas WP Editor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor
- benjaminprojas WP Editor
- Cross-site request forgery (CSRF)
- CVSS 7.2 High
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Update
- benjaminprojas WP Editor
- Path traversal
- CVSS 4.9 Medium
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
- benjaminprojas WP Editor
- Path traversal
- CVSS 7.2 High
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
- benjaminprojas WP Editor
- Insecure deserialization