What’s Vulnerable › Products

mndpsingh287 Theme Editor vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your mndpsingh287 Theme Editor version is affected

Latest mndpsingh287 Theme Editor vulnerabilities

• CVE-2025-14469 — Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification (CVSS 4.3)
• CVE-2026-39640 — WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability (CVSS 9.6)
• CVE-2025-9890 — Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution (CVSS 8.8)
• CVE-2022-2440 — Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization (CVSS 7.2)
• CVE-2021-24154 — Theme Editor < 2.6 - Authenticated Arbitrary File Download (CVSS 4.9)