Themeeditor - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2024-08-29.

Products

• Theme Editor - 2 CVEs

Newest CVEs of Themeeditor

• CVE-2022-2440 - CVSS 7.2 (high), 2024-08-29: The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to, and including…
• CVE-2021-24154 - CVSS 4.9 (medium), 2021-04-05: The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing…