Skip to content

Known vulnerabilities in XplodedThemes WPIDE – File Manager & Code Editor

Is your version affected?

CVE Summary Score Published
CVE-2026-66440 Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions 7.1 High Aug 6, 2026
CVE-2026-57766 Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions 8.8 High Jul 2, 2026
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Medium May 1, 2026
CVE-2024-9546 The WPIDE – File Manager & Code Editor plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to,… 5.3 Medium Oct 14, 2024

Other XplodedThemes products