2 matches found
CVE-2016-10885
The wp-editor plugin before 1.2.6 for WordPress has CSRF.
CVE-2016-10886
The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.