plugin

Visual Text Editor Vulnerabilities

2 known security issues reported for the Visual Text Editor WordPress plugin. Most recent disclosed Mar 26, 2025.

1 high

Running Visual Text Editor on your site? Check whether your installed version is affected.

Scan your site free

Visual Text Editor [visual-text-editor] <= 1.2.1 (unfixed + closed)

unknown

[en] Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Visual Text Editor allows Remote Code Inclusion. This issue affects Visual Text Editor: from n/a through 1.2.1.

Affected:
up to 1.2.1
Fix:
No patched version reported
Disclosed:
Mar 26, 2025

CVE-2025-28893 on NVD →

Visual Text Editor <= 1.2.1 - Authenticated (Contributor+) Remote Code Execution

high

The Visual Text Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

CVSS:
8.8
Affected:
up to 1.2.1
Fix:
No patched version reported
Disclosed:
Mar 24, 2025

CVE-2025-28893 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database