WP Editor
wp-editor · plugin
Known security vulnerabilities for WP Editor. Find out in seconds which version runs on your site with WP Lens.
8 known vulnerabilities
1 critical · latest May 1, 2026
Vulnerabilities
- Critical 9.8
The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.
- High 8.8
WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor
- High 8.8
The wp-editor plugin before 1.2.6 for WordPress has CSRF.
- High 7.5
WordPress WP Editor plugin <=1.2.7 - Sensitive Data Exposure vulnerability
- High 7.2
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Update
- High 7.1
WordPress WP Editor plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability
- Medium 6.1
The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues.
- Medium 4.9
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read