Plugin icon

Theme Editor

theme-editor

Vulnerabilities:

5

Last Updated:

March 19, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2025-10-17
Title
Theme Editor < 3.1 - Cross-Site Request Forgery to Remote Code Execution
Fixed in
Fixed in 3.1
CVSS
8.8 (high)
Published
2024-08-28
Title
Theme Editor < 2.9 - Authenticated (Admin+) PHAR Deserialization
Fixed in
Fixed in 2.9
CVSS
7.2 (high)
Published
2023-11-20
Title
Theme Editor < 2.8 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 2.8
CVSS
7.2 (high)
Published
2021-02-13
Title
Theme Editor < 2.6 - Authenticated Arbitrary File Download
Fixed in
Fixed in 2.6
CVSS
6.8 (medium)
Published
2019-09-30
Title
Theme Editor < 2.2 - Multiple Vulnerabilities
Fixed in
Fixed in 2.2
CVSS
9.9 (critical)