Wpide File Manager Code Editor (Xplodedthemes) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-06. Vendor: Xplodedthemes.

CVEs of Wpide File Manager Code Editor

• CVE-2026-66440 - CVSS 7.1 (high), 2026-08-06: Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.
• CVE-2026-57766 - CVSS 8.8 (high), 2026-07-02: Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions.
• CVE-2024-13362 - CVSS 6.1 (medium), 2026-05-01: Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient…
• CVE-2024-9546 - CVSS 5.3 (medium), 2024-10-15: The WPIDE – File Manager & Code Editor plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.9. This is due to…