77 matches found
CVE-2016-10885
The wp-editor plugin before 1.2.6 for WordPress has CSRF...
CVE-2016-10886
The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions...
CVE-2016-10885
The Red Hat and OpenVAS/Misc entries confirm a CSRF vulnerability in the WordPress wp-editor plugin prior to version 1.2.6. The flaw allows unauthorized requests from authenticated users to perform state-changing actions (CSRF) within wp-editor. Affected component: WordPress wp-editor plugin; vul...
CVE-2016-10886
The CVE-2016-10886 entry concerns the WordPress wp-editor plugin prior to version 1.2.6 with incorrect permissions. Connected sources (Red Hat, CNVD, OpenVAS, PRION, CVE/CVEList mirrors, WPScan) corroborate that the issue affects the wp-editor plugin for WordPress and is limited to versions befor...
PT-2019-7682 · WordPress · Wp Editor
Name of the Vulnerable Software and Affected Versions: wp-editor plugin versions prior to 1.2.6 Description: The issue is related to incorrect permissions in the wp-editor plugin for WordPress. Recommendations: For versions prior to 1.2.6, update to version 1.2.6 or later to resolve the issue...
CVE-2016-10886: Undefined Security Weakness
The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions...
CVE-2016-10885: Cross-Site Request Forgery (CSRF)
The wp-editor plugin before 1.2.6 for WordPress has CSRF...
WordPress wp-editor plugin cross-site scripting vulnerability
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-editor plugin is an editor plugin used in it. A cross-site scripting vulnerability exists in WordPress wp-editor plugin...
CVE-2016-10877
The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues...
CVE-2016-10877
The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues...
Cross site scripting
The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues...
CVE-2016-10877
CVE-2016-10877 affects the WordPress WP Editor plugin prior to version 1.2.6.3, with multiple XSS issues due to lack of proper validation of client-side data. These disclosures come from multiple sources, including CVE records and vendor advisories, and Patchstack explicitly notes upgrading to at...
CVE-2016-10877: Improper Neutralization of Input During Web Page Generation
The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues...
WordPress WP Editor plugin <= 1.2.5.3 - Authenticated Arbitrary File Upload vulnerability
WordPress WP Editor plugin Authenticated Arbitrary File Upload vulnerability is in uploadfiles AJAX function. A user with subscriber or higher role can upload the chosen file to the root directory. Solution Update the plugin...
WP Editor <= 1.2.6.2 - Multiple Cross-Site Scripting (XSS)
The WP Editor WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...
WordPress WP Editor plugin <= 1.2.6.2 - Multiple Cross-Site Scripting (XSS) vulnerabilities
Multiple Cross-Site Scripting XSS vulnerabilities found in WordPress WP Editor plugin versions = 1.2.6.2. Solution Update the WordPress WP Editor plugin to the latest available version at least 1.2.6.3...