| CVE-2025-14469 |
The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
|
4.3
Medium
|
Aug 1, 2026 |
| CVE-2026-39640 |
Cross-Site Request Forgery (CSRF) vulnerability in mndpsingh287 Theme Editor theme-editor allows Code Injection.This…
|
9.6
Critical
|
Apr 8, 2026 |
| CVE-2025-9890 |
The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
|
8.8
High
|
Oct 18, 2025 |
| CVE-2022-2440 |
The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array'…
|
7.2
High
|
Aug 29, 2024 |
| CVE-2023-6091 |
Unrestricted Upload of File with Dangerous Type vulnerability in mndpsingh287 Theme Editor.This issue affects Theme…
|
7.2
High
|
Mar 26, 2024 |