High
CVE-2026-3772
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
Medium
CVE-2025-3295
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
High
CVE-2025-3294
WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Update
Medium
CVE-2025-31035
WP Editor.md – The Perfect WordPress Markdown Editor <= 10.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31808
SCSS WP Editor <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2024-12495
Bootstrap Blocks for WP Editor v2 <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-2446
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-24700
WP Editor <= 1.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-25591
WP Editor <= 1.2.7 - Sensitive Information Exposure via log file
High
CVE-2021-24151
WP Editor <= 1.2.6.3 - Authenticated (Admin+) SQL injection
Critical
CVE-2016-10886
WP Editor < 1.2.6 - Incorrect Permission Assignment or Protection
Medium
CVE-2018-18919
WP Editor.md – The Perfect WordPress Markdown Editor < 10.0.4 - Cross-Site Scripting
Medium
CVE-2016-10877
WP Editor <= 1.2.6.2 - Cross-Site Scripting
High
CVE-2016-10885
WP Editor < 1.2.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.