Ckeditor For Wordpress Vulnerabilities

There is no fix. An unknown person discovered and reported this Arbitrary File Upload vulnerability in WordPress CKEditor Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability h...

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Oct 18, 2023

Update the plugin. An unknown person discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress CKEditor Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit y...

Affected:

up to 4.5.3.1

Fixed in:

4.5.3.1

Disclosed:

Aug 31, 2023

[en] The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.

Affected:

up to 4.5.3.1

Fixed in:

4.5.3.1

Disclosed:

Aug 27, 2019

CVE-2015-9349 on NVD →

This plugin is prone to an arbitrary file upload exploit vunerability. There is no fix.

Affected:

up to 4.0

Fixed in:

4.0

Disclosed:

Oct 18, 2015

The CKEditor plugin before 4.5.3.1 for WordPress has reflected XSS in the built-in (old) file browser.

CVSS:

6.1

Affected:

up to 4.5.3

Fixed in:

4.5.3.1

Disclosed:

Aug 31, 2015

CVE-2015-9349 on NVD →

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Update the plugin.

Affected:

up to 4.5.3.1

Fixed in:

4.5.3.1

Disclosed:

Aug 31, 2015