Skip to content
OpenAdvisories

Product · qriouslad

Code Explorer

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2025-15487

    Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter

    The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of…

    qriouslad Code Explorer Web / CMS
  • Medium 4.9
    CVE-2023-5816

    Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading

    The Code Explorer plugin for WordPress is vulnerable to arbitrary external file reading in all versions up to, and including, 1.4.5. This is due to the fact that the plugin does not restrict accessing files to those outside of the WordPress instance, though t…

    qriouslad Code Explorer Web / CMS