CVE-2016-10877

CVE-2016-10877 affects the WordPress WP Editor plugin prior to version 1.2.6.3, with multiple XSS issues due to lack of proper validation of client-side data. These disclosures come from multiple sources, including CVE records and vendor advisories, and Patchstack explicitly notes upgrading to at...

WordPress WP Editor plugin <= 1.2.5.3 - Authenticated Arbitrary File Upload vulnerability

WordPress WP Editor plugin Authenticated Arbitrary File Upload vulnerability is in uploadfiles AJAX function. A user with subscriber or higher role can upload the chosen file to the root directory. Solution Update the plugin...

WP Editor <= 1.2.6.2 - Multiple Cross-Site Scripting (XSS)

The WP Editor WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...

WordPress WP Editor plugin <= 1.2.6.2 - Multiple Cross-Site Scripting (XSS) vulnerabilities

Multiple Cross-Site Scripting XSS vulnerabilities found in WordPress WP Editor plugin versions = 1.2.6.2. Solution Update the WordPress WP Editor plugin to the latest available version at least 1.2.6.3...

WP Editor < 1.2.6 - CSRF & Incorrect Permissions

The WP Editor WordPress plugin was affected by a CSRF & Incorrect Permissions security vulnerability...