Skip to content
OpenAdvisories

Vendor

koopersmith

1 known vulnerabilities.

Products

Elastic Theme Editor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-12637

    Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload

    The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the process_theme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with …

    koopersmith Elastic Theme Editor Web / CMS