Skip to content
OpenAdvisories

Vendor

mndpsingh287

14 known vulnerabilities.

Products

File Manager 6 Theme Editor 5 WP Mail 2 Track Page Scroll 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2025-68008

    WordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mndpsingh287 WP Mail wp-mail allows Reflected XSS.This issue affects WP Mail: from n/a through <= 1.3.

    mndpsingh287 WP Mail
  • High 8.8
    CVE-2025-9890

    Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution

    The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0. This is due to missing or incorrect nonce validation on the 'theme_editor_theme' page. This makes it possible for unauthenticated atta…

    mndpsingh287 Theme Editor Web / CMS
  • High 7.1
    CVE-2025-23536

    WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mndpsingh287 Track Page Scroll track-page-scroll allows Reflected XSS.This issue affects Track Page Scroll: from n/a through <= 1.0.2.

    mndpsingh287 Track Page Scroll
  • High 7.2
    CVE-2022-2440

    Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization

    The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to, and including 2.8. This makes it possible for authenticated attackers with administrative privileges to call files us…

    mndpsingh287 Theme Editor Web / CMS
  • High 7.2
    CVE-2023-6091

    WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in mndpsingh287 Theme Editor.This issue affects Theme Editor: from n/a through 2.7.1.

    mndpsingh287 Theme Editor Web / CMS
  • High 8.8
    CVE-2024-1538 EPSS 11%

    File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion

    The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.2.4. This is due to missing or incorrect nonce validation on the wp_file_manager page that includes files through the 'lang' parameter. T…

    mndpsingh287 File Manager Web / CMS
  • High 8.1
    CVE-2024-0761

    File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames

    The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to insufficient randomness in the backup filenames, which use a timestamp plus 4 random digits. This makes it possible for un…

    mndpsingh287 File Manager Web / CMS