benjaminprojas

Products

ProductCVEsExploitedLatest
WP Editor4–May 1, 2026

Exploited and recent CVEs

  • CVE-2026-3772 High 8.8 WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor 0.2%
  • CVE-2025-3294 High 7.2 WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Update 1.0%
  • CVE-2025-3295 Medium 4.9 WP Editor <= 1.2.9.1 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read 0.5%
  • CVE-2022-2446 High 7.2 WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization 0.6%