Medium · 6.5 CVE-2022-40217 EUVD-2022-43515GHSA-f67v-5x5c-x8vr

WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability

Published Sep 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+) Arbitrary File Edit/Upload vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.

Vendor	Product	Affected	Fixed
XplodedThemes	WPIDE – File Manager & Code Editor (WordPress plugin)	<= 2.6 – ≤ 2.6	—