Theme Editor (Themeeditor) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2024-08-29. Vendor: Themeeditor.

CVEs of Theme Editor

• CVE-2022-2440 - CVSS 7.2 (high), 2024-08-29: The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to, and including…
• CVE-2021-24154 - CVSS 4.9 (medium), 2021-04-05: The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing…