7.1
High
CVE-2026-66440 Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions
Description
Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WPIDE – File Manager & Code Editor 3.5 | earliest → 3.5.7 | No fix stated |
Other CVEs of WPIDE – File Manager & Code Editor
The 4 CVEs of WPIDE – File Manager & Code Editor →
CVE-2026-57766
Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions
8.8
High
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Medium
CVE-2024-9546
The WPIDE – File Manager & Code Editor plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to,…
5.3
Medium