Product by Mndpsingh287

    Theme Editor

    5 known vulnerabilities in Theme Editor (Mndpsingh287), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Theme Editor (Mndpsingh287)
    HighCVE-2022-2440

    Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization

    		7.2
    HighCVE-2025-9890

    Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution

    		8.8
    CriticalCVE-2026-39640

    Mndpsingh287 Theme Editor: Cross-Site Request Forgery (CSRF)

    		9.6
    HighCVE-2023-6091

    WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability

    		7.2
    MediumCVE-2025-14469

    Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification

    		4.3

    All products by Mndpsingh287