Themeeditor Theme_editor
2 CVEs affecting Themeeditor Theme_editor. Latest disclosed: 2024-08-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2440 | High | 7.2 | 2024-08-29 | The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to, and including 2.8… |
CVE-2021-24154 | Medium | 4.9 | 2021-04-05 | The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing administrators… |