CVE-2024-25591

概要

参考情報

• patchstack.com/database/vulnerability/wp-editor/wordpress-wp-editor-plugin-1-2-7-sensitive-data-exposure-vulnerability · Third Party Advisory

wp editor のその他の脆弱性

• CVE-2025-3295中 4.9The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1. This makes it possibl…
• CVE-2025-3294高 7.2The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all versions up to, and inc…
• CVE-2022-2446高 7.2The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up…
• CVE-2021-24151高 7.2The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated (admin+) blind SQL i…
• CVE-2016-10886緊急 9.8The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.