Advisories · Technology

POEditor.

Every CVE that names POEditor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49237 CVE record

CVSS 7.4 High

WordPress POEditor plugin <= 0.9.10 - CSRF to Arbitrary File Deletion vulnerability
- POEditor
- Cross-site request forgery (CSRF)
Not analysed yet 6 Jun 2025
CVE-2024-32453 CVE record

CVSS 5.9 Medium

WordPress POEditor plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability
- POEditor
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2024
CVE-2023-32091 CVE record

CVSS 5.4 Medium

WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)
- POEditor
- Cross-site request forgery (CSRF)
Not analysed yet 3 Oct 2023
CVE-2023-4209 CVE record

CVSS 4.3 Medium

POEditor < 0.9.8 - Settings Reset via CSRF
- POEditor
Not analysed yet 30 Aug 2023