Advisories · Technology
mndpsingh287 Theme Editor.
Every CVE that names mndpsingh287 Theme Editor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification
- mndpsingh287 Theme Editor
- Cross-site request forgery (CSRF)
- CVSS 9.6 CriticalCritical · CVSS 9+
WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability
- mndpsingh287 Theme Editor
- Cross-site request forgery (CSRF)
- CVSS 8.8 High
Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution
- mndpsingh287 Theme Editor
- Cross-site request forgery (CSRF)
- CVSS 7.2 High
Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization
- mndpsingh287 Theme Editor
- Insecure deserialization
- CVSS 7.2 High
WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability
- mndpsingh287 Theme Editor
- Unrestricted file upload