Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

POEditor vulnerabilities

3 published CVEs name POEditor among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20241
  3. 20251

Newest CVEs

  • CVE-2025-49237

    WordPress POEditor plugin <= 0.9.10 - CSRF to Arbitrary File Deletion vulnerability

    POEditor · POEditor

    High7.4
  • CVE-2024-32453

    WordPress POEditor plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability

    POEditor · POEditor

    Medium5.9
  • CVE-2023-32091

    WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)

    POEditor · POEditor

    Medium5.4

Products with the most CVEs

  1. POEditor3

Most common weaknesses

  1. CWE-352 Cross-site request forgery (CSRF)2
  2. CWE-79 Cross-site scripting (XSS)1