mndpsingh287 vulnerabilities

CVEs per yearBy the year they were published

1. 20248
2. 20253
3. 20263

Newest CVEs

• CVE-2025-14469

  Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification

  mndpsingh287 · Theme Editor

  Medium4.3
• CVE-2026-39640

  WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability

  mndpsingh287 · Theme Editor

  Critical9.6
• CVE-2025-68008

  WordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

  mndpsingh287 · WP Mail

  High7.1
• CVE-2025-9890

  Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution

  mndpsingh287 · Theme Editor

  High8.8
• CVE-2025-58822

  WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability

  mndpsingh287 · WP Mail

  Medium6.5
• CVE-2025-23536

  WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

  mndpsingh287 · Track Page Scroll

  High7.1
• CVE-2024-37254

  WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability

  mndpsingh287 · File Manager

  Medium4.3
• CVE-2018-25105

  File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download

  mndpsingh287 · File Manager

  Critical9.8
• CVE-2022-2440

  Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization

  mndpsingh287 · Theme Editor

  High7.2
• CVE-2024-2654

  File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal

  mndpsingh287 · File Manager

  Medium6.8