WordPress Plugin Vulnerabilities

TinyMCE Color Picker 1.1 - tinymce-colorpicker.php Missing edit_others_posts Capability Check

Description

The TinyMCE Color Picker WordPress plugin was affected by a tinymce-colorpicker.php Missing edit_others_posts Capability Check security vulnerability.

Affects Plugins

Plugin icon
tinymce-colorpicker
Fixed in 1.2

References

CVE
CVE-2014-3844

Miscellaneous

Verified
No
WPVDB ID
f5db028f-dfe5-4e3a-892b-ac707cb09e3f

Timeline

Publicly Published
2014-04-28 (about 12 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
NextGEN Gallery 2.0.0 - Directory Traversal
Published
2020-02-05
Title
Events Manager Pro < 2.6.7.2 - CSV Injection
Published
2014-08-01
Title
Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access
Published
2014-08-01
Title
IndiaNIC FAQs Manager 1.0 - CAPTCHA Value Disclosure
Published
2014-08-01
Title
Image News Slider 3.1 - Multiple Unspecified Remote Issues