Vendor

    Mndpsingh287

    19 known vulnerabilities in products by Mndpsingh287, 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Mndpsingh287
    CriticalCVE-2023-6825

    File Manager And File Manager Pro (Multiple Versions) - Directory Traversal

    also in 1 other product

    		9.9
    HighCVE-2024-1538

    File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion

    also in 1 other product

    		8.8
    CriticalCVE-2018-25105

    File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download

    also in 1 other product

    		9.8
    HighCVE-2024-0761

    File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames

    also in 1 other product

    		8.1
    MediumCVE-2024-2654

    File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal

    also in 1 other product

    		6.8
    HighCVE-2022-2440

    Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization

    		7.2
    HighCVE-2025-9890

    Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution

    		8.8
    CriticalCVE-2026-39640

    Mndpsingh287 Theme Editor: Cross-Site Request Forgery (CSRF)

    		9.6
    HighCVE-2023-6091

    WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability

    		7.2
    HighCVE-2024-3643

    Newsletter Popup <= 1.2 - List Deletion via CSRF

    		8.8
    HighCVE-2024-2739

    Advance Search <= 1.1.6 - Shortcode Deletion via CSRF

    		8.7
    HighCVE-2025-68008

    WordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-23536

    WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-58822

    WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2024-3641

    Newsletter Popup <= 1.2 - Unauthenticated Stored XSS

    		6.1
    MediumCVE-2025-14469

    Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification

    		4.3
    MediumCVE-2024-3642

    Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF

    		6.9
    MediumCVE-2024-3644

    Newsletter Popup <= 1.2 - Admin+ Stored XSS

    		4.8
    MediumCVE-2024-37254

    WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability

    		4.3

    Products

    Products by Mndpsingh287
    File Manager70
    Theme Editor50
    Newsletter Popup40