Skip to content
Mmndpsingh287
Exploited and recent CVEs
-
CVE-2025-14469
Medium 4.3
Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification
0.2%
-
CVE-2026-39640
Critical 9.6
WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability
0.1%
-
CVE-2025-68008
High 7.1
WordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
0.3%
-
CVE-2025-9890
High 8.8
Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution
0.4%
-
CVE-2025-58822
Medium 6.5
WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability
0.2%
-
CVE-2025-23536
High 7.1
WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
0.4%
-
CVE-2024-37254
Medium 4.3
WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability
0.3%
-
CVE-2022-2440
High 7.2
Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization
0.7%
-
CVE-2024-2654
Medium 6.8
File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
0.9%
-
CVE-2023-6091
High 7.2
WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability
0.6%
-
CVE-2024-1538
High 8.8
File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion
10.7%
-
CVE-2023-6825
Critical 9.9
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
6.0%
-
CVE-2024-0761
High 8.1
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
1.0%