mndpsingh287

Products

ProductCVEsExploitedLatest
File Manager5–Nov 1, 2024
Theme Editor5–Aug 1, 2026
WP Mail2–Jan 22, 2026
Track Page Scroll1–Mar 3, 2025

Exploited and recent CVEs

  • CVE-2025-14469 Medium 4.3 Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification 0.2%
  • CVE-2026-39640 Critical 9.6 WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability 0.1%
  • CVE-2025-68008 High 7.1 WordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-9890 High 8.8 Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution 0.4%
  • CVE-2025-58822 Medium 6.5 WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-23536 High 7.1 WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-37254 Medium 4.3 WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability 0.3%
  • CVE-2022-2440 High 7.2 Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization 0.7%
  • CVE-2024-2654 Medium 6.8 File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal 0.9%
  • CVE-2023-6091 High 7.2 WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability 0.6%
  • CVE-2024-1538 High 8.8 File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion 10.7%
  • CVE-2023-6825 Critical 9.9 File Manager And File Manager Pro (Multiple Versions) - Directory Traversal 6.0%
  • CVE-2024-0761 High 8.1 File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames 1.0%