xplodedthemes vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20244
3. 20263

Newest CVEs

• CVE-2026-66440

  WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability

  XplodedThemes · WPIDE – File Manager & Code Editor

  High7.1
• CVE-2026-57766

  WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability

  XplodedThemes · WPIDE – File Manager & Code Editor

  High8.8
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2024-9178

  XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  xplodedthemes · XT Floating Cart for WooCommerce

  Medium6.4
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-9546

  WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure

  xplodedthemes · WPIDE – File Manager & Code Editor

  Medium5.3
• CVE-2024-8716

  XT Ajax Add To Cart for WooCommerce <= 1.1.2 - Reflected Cross-Site Scripting

  xplodedthemes · XT Ajax Add To Cart for WooCommerce

  Medium6.1
• CVE-2022-40217

  WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability

  XplodedThemes · WPIDE – File Manager & Code Editor (WordPress plugin)

  Medium6.5
• CVE-2022-35235

  WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Read vulnerability

  XplodedThemes · WPIDE – File Manager & Code Editor (WordPress plugin)

  Medium4.9