Medium · 4.9 CVE-2022-35235 EUVD-2022-38127GHSA-q7xv-26r5-c2h7

WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Read vulnerability

Published Aug 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+) Arbitrary File Read vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.

Vendor	Product	Affected	Fixed
XplodedThemes	WPIDE – File Manager & Code Editor (WordPress plugin)	<= 2.6 – ≤ 2.6	—