WordPress Plugin Vulnerabilities

WP Editor < 1.2.6 - CSRF & Incorrect Permissions

Description

The WP Editor WordPress plugin was affected by a CSRF & Incorrect Permissions security vulnerability.

Affects Plugins

Plugin icon
wp-editor
Fixed in 1.2.6

References

CVE
CVE-2016-10885
CVE
CVE-2016-10886

Miscellaneous

Verified
No
WPVDB ID
df969957-77bc-40a8-a265-1d74768145fa

Timeline

Publicly Published
2016-05-13 (about 10 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2019-07-11
Title
School Management < 57.0 - CSRF and Stored XSS
Published
2014-08-01
Title
Love It - XSS / Content Spoofing / Path Disclosure
Published
2015-01-12
Title
Banner Effect Header 1.2.6 - XSS & CSRF
Published
2014-09-17
Title
Ready! Coming Soon 0.5.0 - CSRF & XSS
Published
2017-10-23
Title
Contact Form for WordPress – Ultimate Form Builder Lite <= 1.3.6 - SQL Injection