7.2
High
CVE-2023-6091 Unrestricted Upload of File with Dangerous Type vulnerability in mndpsingh287 Theme Editor.This issue affects Theme…
Description
Unrestricted Upload of File with Dangerous Type vulnerability in mndpsingh287 Theme Editor.This issue affects Theme Editor: from n/a through 2.7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Theme Editor 2.7 | earliest → 2.7.1 | No fix stated |
| theme_editor 2.7 | earliest → 2.7.1 | No fix stated |
Other CVEs of Theme Editor
The 5 CVEs of Theme Editor →
CVE-2025-14469
The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
4.3
Medium
CVE-2026-39640
Cross-Site Request Forgery (CSRF) vulnerability in mndpsingh287 Theme Editor theme-editor allows Code Injection.This…
9.6
Critical
CVE-2025-9890
The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
8.8
High
CVE-2022-2440
The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array'…
7.2
High